Fidelity National Information Services 10-K 2024-12-31

UNITED STATES SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

________________________________________________________

Form 10-K

________________________________________________________

For the fiscal year ended December 31, 2024

Or

Commission File No. 001-16427

________________________________________________________

Fidelity National Information Services, Inc.

(Exact name of registrant as specified in its charter)

Georgia 37-1490331

(State or other jurisdiction of incorporation or organization) (I.R.S. Employer Identification No.)

347 Riverside Avenue

Jacksonville, Florida 32202

(Address of principal executive offices) (Zip Code)

(904) 438-6000

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(g) of the Act: None

(Title of Class)

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☒ No ☐

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of "large accelerated filer," "accelerated filer," "smaller reporting company" and "emerging growth company" in Rule 12b-2 of the Exchange Act. (Check one):

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management's assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant

included in the filing reflect the correction of an error to previously issued financial statements. ☒

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based

compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☒

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act) Yes ☐ No ☒

As of June 30, 2024, the last business day of the registrant's most recently completed second fiscal quarter, the aggregate market value of the registrant's common stock held by nonaffiliates was $41,321,625,726 based on the closing sale price of $75.36 on that date as reported by the New York Stock Exchange. For the purposes of the foregoing sentence only, all directors and executive officers of the registrant were assumed to be affiliates. The number of shares outstanding of the registrant's common stock, $0.01 par value per share, was 529,691,586 as of February 11, 2025.

The information in Part III hereof is incorporated herein by reference to the registrant’s Proxy Statement on Schedule 14A for the fiscal year ended December 31, 2024, to be filed within 120 days after the close of the fiscal year that is the subject of this Report.

FIDELITY NATIONAL INFORMATION SERVICES, INC.

2024 FORM 10-K ANNUAL REPORT

TABLE OF CONTENTS

Table of Contents

Unless stated otherwise or the context otherwise requires, all references to "FIS," "we," "our," "us," the "Company" or the "registrant" are to Fidelity National Information Services, Inc., a Georgia corporation, and its subsidiaries. Also, amounts in tables may not sum or calculate due to rounding.

PART I

Overview

About FIS

FIS is a financial technology company providing solutions to financial institutions, businesses and developers. We unlock financial technology to the world across the money lifecycle underpinning the world's financial systems. Our people are dedicated to advancing the way the world pays, banks and invests, by helping our clients to confidently run, grow and protect their businesses. Our expertise comes from decades of experience helping financial institutions and businesses of all sizes adapt to meet the needs of their customers by harnessing where reliability meets innovation in financial technology. Headquartered in Jacksonville, Florida, FIS is a member of the Fortune 500® and the Standard & Poor’s 500® Index. FIS is incorporated under the laws of the State of Georgia as Fidelity National Information Services, Inc., and our stock is traded under the trading symbol "FIS" on the New York Stock Exchange.

Growth and Strategy Objectives

Our growth has been driven by a number of factors, including growth of our customers' businesses, our internal development of new solutions that enhance our client offerings, and our sales and marketing efforts to expand our customer base and addressable markets. Acquisitions have also contributed additional solutions that complement or enhance our offerings, diversify our client base, expand our geographic coverage, and provide entry into new and attractive adjacent markets that align with our strategic objectives. We continue to strategically allocate resources to both internal and external growth initiatives to enhance the long-term value of our business.

Worldpay Sale Summary

On January 31, 2024, we completed the sale (the "Worldpay Sale") of a 55% equity interest in our Worldpay Merchant Solutions business to private equity funds managed by GTCR, LLC (such funds, the "Buyer"). FIS retained a non-controlling 45% equity interest in a new standalone joint venture, Worldpay Holdco, LLC ("Worldpay"), following the closing of the Worldpay Sale. Worldpay continues to provide merchant acquiring and related services to businesses of all sizes and across any industry globally, enabling them to accept, authorize and settle electronic payment transactions. In connection with the Worldpay Sale, FIS and Worldpay entered into commercial agreements, preserving a key value proposition for clients of both businesses and reducing potential dis-synergies. FIS and Worldpay also entered into additional agreements as described in Note 4 to the consolidated financial statements.

Competitive Strengths

We believe our competitive strengths include the following:

• Brand. FIS is a highly respected brand known globally for innovation and thought leadership in the financial services sector.

• Extensive Domain Expertise and Portfolio Breadth. FIS' significant expertise in the markets and domains we serve enables us to deliver a broad range of innovative software applications and flexible service offerings, ranging from managed processing arrangements, either at the client site or hosted at an FIS data center or in our private cloud, to traditional license and maintenance arrangements. Our expansive solution set allows us to bundle tailored or integrated services to compete effectively.

• Excellent and Long-term Relationships with Clients. A significant percentage of our business relates to solutions provided under multi-year, recurring contracts. The nature of these relationships allows us to develop close partnerships with our clients, resulting in high client retention rates. As the breadth of FIS' service offerings has

Table of Contents

expanded, we have found that our deep and broad access within our clients' organizations presents greater opportunities for cross-selling and up-selling solutions to our clients.

*•*Modern and Cloud-based Technologies. FIS leverages the modern architectures of our software applications and our ability to integrate many of our solutions with the solutions of others to provide customized solutions that respond to individualized client needs. We have made significant investment in modernizing our platforms and solutions and have moved substantially all of our server compute into our private cloud located in our strategic data centers, supplemented by public clouds in certain regions, to increase speed of delivery to clients and increase solution availability to industry-best levels.

*•*Global Distribution and Scale. We are a global leader in many of the markets we serve, supported by a large, knowledgeable talent pool of employees around the world. Our worldwide presence and global scale enable us to leverage our array of solution offerings, client relationships, and modern infrastructure to drive revenue growth and operating efficiency.

Strategy

Our mission is to deliver superior solutions to our clients and to expand our client base to generate sustained revenue and earnings growth for our shareholders. Our strategy to achieve this goal is built on the following pillars:

• Build, Buy, or Partner to Add Solutions to Win New Clients and Cross-sell to Existing Clients. We continue to invest in our solution portfolio through internal software development, as well as through acquisitions, equity investments and partnerships that complement and extend our existing solutions and capabilities, providing us with additional solutions to cross-sell to current clients and to capture the interest of new clients. By investing in solution innovation, we continue to expand our value proposition to our clients and prospects.

• Support Our Clients Through Innovation. Changing market dynamics, particularly in the areas of digital delivery, information security and regulation, are transforming the way our clients operate, which is driving incremental demand for our integrated solutions built around our intellectual property. As clients and prospects evaluate technology, business process changes and vendor risks, our depth of service capabilities enables us to become involved earlier in their planning and design process and assist them as they manage these changes.

• Drive Efficiency and Scalability. We strive to improve the efficiency of our operations through investments in new technologies, processes and infrastructure modernization. We also leverage a one-to-many operating model to drive high incremental margins on revenue growth, while also providing cost-effective solutions for our clients.

• Expand Distribution. Through our global sales force and strategic commercial partnerships, we drive growth through client additions and the expansion of existing client relationships in support of our clients' growth ambitions. Our clients range from large banks, financial institutions and other enterprises, including multi-national clients, to community or regional financial institutions and other businesses.

• Allocate Our Capital and Resources Strategically. As we make decisions with respect to building, buying or partnering to drive innovation in support of our clients, we prioritize the allocation of capital and other resources to the opportunities providing the highest client benefit and growth potential. We also continually review our portfolio of assets and businesses to assess their fit with our strategy and will, from time to time, decide to wind down or divest businesses or assets to redeploy capital to our areas of strategic focus. We believe that keeping our team and our capital strategically focused benefits our existing clients and our ability to win new clients. At the same time, to the extent our businesses generate excess cash, we strategically use it to repurchase shares, repay debt, pay dividends or for other corporate purposes.

Segment Information

FIS reports its financial performance based on the following segments: Banking Solutions ("Banking"), Capital Market Solutions ("Capital Markets") and Corporate and Other.

The Worldpay Merchant Solutions business included the former Merchant Solutions segment in addition to a business previously included in the Corporate and Other segment. The results of the Worldpay Merchant Solutions business have been recast as discontinued operations for all periods presented. Accordingly, the Company no longer reports the Merchant Solutions

Table of Contents

segment. The assets and liabilities of the Worldpay Merchant Solutions business disposal group are presented separately on the consolidated balance sheets, and the operating results have been reflected as discontinued operations for all periods presented. As such, the related results have been excluded from continuing operations and segment results. See Notes 1 and 3 to the consolidated financial statements for further information regarding the Worldpay Merchant Solutions disposal group and its discontinued operations. FIS' share of the net income of Worldpay is reported as equity method investment earnings (loss).

As a result of our ongoing portfolio assessments, the Company reclassified certain businesses from Capital Markets to Banking and to Corporate and Other during the quarter ended March 31, 2023, and reclassified certain non-strategic operations from Banking to Corporate and Other during the quarter ended December 31, 2023. The Company recast all prior-period segment information presented to reflect these reclassifications. See "Segment Information" below for additional discussion of our solutions and customers. See also Notes 6 and 22 to the consolidated financial statements for additional information about our segment revenue.

Our consolidated results generally do not reflect pronounced seasonality. However, quarterly revenue and margins for each segment may vary based on the timing of recognition of certain non-recurring revenue, including software licenses and termination fees.

For information about current trends in market demand, see "Item 7. Management's Discussion and Analysis of Financial Condition and Results of Operations - Business Trends and Conditions*.*"

Revenue by Segment

The table below summarizes our revenue by reporting segment (in millions):

(1)During 2024, the Company revised its previously issued consolidated financial statements as of and for the annual periods ended December 31, 2023 and 2022, to correct certain immaterial misstatements. See Note 24 to the consolidated financial statements for information about our revision of prior-period consolidated financial statements.

Banking Solutions ("Banking")

The Banking segment is focused on serving financial institutions with core processing software, transaction processing software and complementary applications and services, many of which interact directly with core processing software. We sell these solutions on either a bundled or stand-alone basis. Clients in this segment include global financial institutions, U.S. regional and community banks, credit unions and commercial lenders, as well as government institutions and other commercial organizations. We provide our clients integrated solutions characterized by multi-year processing contracts that generate recurring revenue. The predictable nature of cash flows generated from the Banking segment provides opportunities for further investments in innovation, integration, information and security, and compliance in a cost-effective manner.

Our solutions in this segment include the following:

• Core Processing and Ancillary Applications. Our core processing software applications, including deposit and lending, customer management and other central management systems, are designed to run banking processes for our financial institution clients. Clients use these applications to maintain the primary records of their customer accounts. Our diverse selection of market-focused core processing software applications enables FIS to compete effectively in a wide range of markets. We continue to invest in our core modernization efforts to further differentiate our offerings for the long term. We also offer a number of solutions that are ancillary to the primary applications listed above, including branch automation, back-office support systems and compliance support.

• Digital, including Mobile and Online. Our comprehensive suite of retail and commercial applications enables financial institutions to streamline and integrate customer-facing operations with back-office processes, thereby improving customer experience across channels (e.g., branch, internet, mobile, ATM, and call centers). FIS' focus on real-time consumer access has driven significant market innovation in multi-channel, API-enabled embedded and multi-hosted solutions, underpinned by a strategy that provides tight integration and a seamless customer experience. Our innovative digital banking capabilities are now available to financial institutions with continually expanding

Table of Contents

functionality. Our digital offerings are integrated with core banking platforms offered by FIS and are also offered to customers of non-FIS core systems.

• Fraud, Risk Management and Compliance. Our decision solutions offer a spectrum of options that cover the account lifecycle from helping to identify qualified account applicants to managing existing customer accounts and fraud. Our applications enable Know Your Customer, new account decisioning and opening, account and transaction management, fraud management and collections. Our risk management solutions use our proprietary risk management models and data sources to assist in detecting fraud and assessing the risk of opening a new account. Our systems use a combination of advanced authentication procedures, predictive analytics, artificial intelligence modeling and proprietary and shared databases to assess and detect fraud risk for deposit, card and other transactions for financial institutions.

• Card and Retail Payments. Our card and retail payment technology solutions allow clients to issue VISA®, MasterCard® or other payment network-branded credit and debit cards or other electronic payment cards for use by both consumer and business accounts. Card-based volumes continue to increase, driven by both the number of transactions per month and the value of those transactions. We offer EMV (Europay, MasterCard and Visa) integrated circuit cards, often referred to as chip cards, as well as a variety of stored-value card types and loyalty programs, including our Premium Payback service that allows our financial institutions' customers to use loyalty points at a variety of merchant point-of-sale systems. Our integrated solutions range from card production and activation to processing to an extensive range of fraud management solutions and value-added loyalty programs designed to increase card usage and fee-based revenue for financial institutions and merchants. The majority of our programs are full service, including most of the operations and support necessary for an issuer to operate a credit card program. We do not make credit decisions for our card issuing clients. We are also a leading provider of prepaid card solutions, which include digital cards, gift cards and reloadable cards, with end-to-end solutions for the development, processing and administration of stored-value programs, including government benefit programs. Our closed-loop gift card solutions and loyalty programs provide merchants compelling solutions to drive consumer loyalty.

• Electronic Funds Transfer and Network. Our electronic funds transfer and debit card processing businesses offer settlement and card management solutions for financial institution card issuers. We offer a modern, core-agnostic payment hub with real-time fraud monitoring across payment rails. We own and operate several U.S. domestic debit, prepaid, ATM and credit networks that carry transactions for a variety of transaction modes. Our networks connect millions of cards and point-of-sale locations nationwide, providing consumers with secure, real-time access to their money. Also through our networks, clients such as financial institutions, retailers and independent ATM operators can capitalize on the efficiency, consumer convenience and security of electronic real-time payments, real-time account-to-account transfers, and strategic alliances, such as surcharge-free ATM network arrangements.

• Wealth and Retirement. We provide wealth and retirement solutions that help banks, trust companies, brokerage firms, insurance firms, retirement plan professionals, benefit administrators and independent advisors acquire, service and grow their client relationships. We provide solutions for client acquisition, transaction management, trust accounting and recordkeeping that can be deployed stand-alone, as part of an integrated wealth or retirement platform, or on an outsourced basis.

*•*Item Processing and Output Solutions. Our item processing solutions furnish financial institutions with the technology needed to capture data from checks, transaction tickets and other items; image and sort items; process exceptions through keying; and perform balancing, archiving and the production of statements. Our item processing services are performed at one of our multiple item processing centers located throughout the U.S. or on-site at client locations. Our extensive solutions include distributed (i.e., non-centralized) data capture, mobile deposit capture, check and remittance processing, fraud detection, and document and report management. Clients encompass banks and corporations of all sizes, from de novo banks to the largest financial institutions and corporations. We offer a number of output solutions that are ancillary to the primary solutions we provide, including print and mail capabilities, document composition software and solutions, and card personalization fulfillment solutions. Our print and mail solutions offer complete computer output solutions for the creation, management and delivery of print and fulfillment needs. We provide our card personalization fulfillment solutions for branded credit cards and branded and non-branded debit and prepaid cards.

Table of Contents

Capital Market Solutions ("Capital Markets")

The Capital Markets segment is focused on serving global financial services clients and corporations with a broad array of buy- and sell-side, treasury, risk management and lending solutions. Clients in this segment include asset managers, private equity firms, sell-side securities brokerage and trading firms, insurers, asset and auto financiers and other commercial organizations. Our solutions include a variety of mission-critical buy- and sell-side applications for recordkeeping, data and analytics, trading and financing, as well as corporate treasury and risk management applications. Capital Markets clients purchase our solutions in various ways including licensing and managing technology "in-house," using consulting and third-party service providers, as well as procuring fully outsourced end-to-end solutions. Our long-established relationships with many of these financial and commercial institutions generate significant recurring revenue. We have made, and continue to make, investments in modern platforms, advanced technologies, open APIs, machine learning and artificial intelligence, and regulatory technology to support our Capital Markets clients.

Our solutions in this segment include the following:

• Trading and Asset Services. We offer solutions that support our customers across the buy and sell sides of the capital markets industry, assisting them to control their front, middle and back office operations through integrated ecosystems. Our solutions support institutional investors, managers, broker-dealers, asset servicers and transfer agents across all asset classes including private equity, hedge, credit, and traditional. Our trading applications focus on advanced trade life-cycle management, including market making and risk management, cleared derivatives processing, securities processing and securities finance, tax processing, and regulatory compliance, including anti-money laundering (AML) and trade surveillance. Our Asset Servicing solutions support every stage of the investment process, from research and portfolio management to order and position management, valuation, risk management, corporate actions, reconciliation, investment accounting, investor accounting, transfer agency and client reporting. Our solutions improve both investment decision making and operational efficiency, while managing risk and increasing transparency across the industry.

• Lending. Our lending solutions offer full life-cycle commercial lending functionality from loan origination, commercial credit assessment and customer risk rating to loan servicing and data analytics. We also offer the leveraged and syndicated loan markets solutions that manage amendments, secondary market trading, deal management and bookrunning. In the asset finance space, we offer a single, end-to-end leasing platform that helps auto and equipment finance companies manage the entire financing process, supporting origination and pricing, credit decisioning, contract management, servicing and collections.

• Treasury and Risk. Our treasury solutions help chief financial officers and treasurers manage working capital by reducing risk and improving communication and response time between a company's buyers, suppliers, banks, and other stakeholders. Our end-to-end financial management framework helps bring together receivables, treasury, and payments for a single view of cash and risk, which helps our clients optimize business processes for enhanced liquidity management. Our risk portfolio of solutions manages market and credit risk and regulatory compliance for banks and actuarial risk for insurance firms.

Corporate and Other

The Corporate and Other segment consists of corporate overhead expense, certain leveraged functions and miscellaneous expenses that are not included in the operating segments, as well as certain non-strategic businesses that we plan to wind down or sell. The overhead and leveraged costs relate to corporate marketing, finance, accounting, human resources, legal, compliance and internal audit functions, as well as other costs, such as acquisition, integration and transformation-related expenses and amortization of acquisition-related intangibles, that are not considered when management evaluates revenue-generating segment performance. Our other operating income recorded in connection with our transaction services arrangements with Worldpay is also recorded in Corporate and Other.

Sales and Marketing

Our sales personnel have expertise in particular solutions, geographic markets and industry verticals, as well as across our various client segments. We believe that focusing our expertise on clients in specific markets and tailoring integrated solution sets to participants in those markets enables us to better serve our clients and makes our offerings more attractive to prospects. The majority of our prospects are identified via direct and/or indirect field sales, as well as inbound and outbound lead generation, telesales and virtual sales efforts.

Table of Contents

Our global marketing team develops and leads the execution of global, role-specific and geography-based strategic marketing plans in support of the segments' reputation and relationship building goals in addition to their revenue and profitability goals. Key components of our strategic plans include brand amplification and digital enablement; market and competitive research; voice of the customer and client engagement; thought leadership; integrated go-to-market programs; internal communications and readiness; journalists and social media engagement; industry analyst relations; client events; trade shows; high-touch client programs; demand generation campaigns; account- and deal-based marketing programs; collateral development and management across digital and online channels; and the launch of new products to market.

Patents, Copyrights, Trademarks and Other Intellectual Property

In general, we own the intellectual property and proprietary rights that are necessary to conduct our business and are important to our future success, including trademarks, trade names, trade secrets, copyrights and patents. We license certain items from third parties under arms-length agreements for varying terms, including some "open source" licenses.

We rely on a combination of contractual restrictions, internal security practices, patents, trade secrets, copyrights and applicable law to establish and protect our software, technology and expertise worldwide. We rely on trademark law to protect our rights in our brands. We intend to continue taking commercially reasonable measures to protect our intellectual property rights, including by legal action when necessary and appropriate.

Competition

The markets for our solutions are intensely competitive across both established companies and new industry entrants. Depending on the business line, our primary competitors include, but are not limited to, internal technology or software development departments within financial institutions or other large companies; global and regional companies providing banking, payment and capital markets services; embedded payment solution providers; securities exchanges; asset managers; card associations; clearing networks or associations; trust companies; independent computer services firms; companies that develop verticalized software applications; companies owned by global banks selling competitive solutions; companies that provide customized development, implementation and support services; emerging technology innovators and business process outsourcing companies. Many of these companies compete with us across multiple solutions, market segments and geographies to varying degrees based on solution strength and distribution strength. Competitive factors impacting the success of our solutions include the quality of the technology-based application or service, breadth of application features and functions, ease of delivery and integration, the ability to maintain, enhance and support the applications or solutions, price and overall client experience. We believe that we compete vigorously in each of these categories. In addition, we believe our domain expertise and the breadth and complementary nature of our portfolio of applications, services and integrated solutions enhances our competitiveness against companies with more limited offerings. Our ability to innovate and scale digital payments and solutions has been a competitive advantage as well.

Technology Development

Our technology development activities primarily relate to the modernization of our proprietary core processing software applications and the design and development of next generation digital solutions, processing systems, software applications and risk management platforms. We expect to continue our practice of investing an appropriate level of resources to maintain, enhance and extend the functionality of our proprietary systems and software applications, to develop new and innovative software applications and systems to address emerging technology trends in response to the needs of our clients and to enhance the capabilities of our outsourcing infrastructure. In addition, we intend to offer solutions compatible with new and emerging delivery channels.

As part of our technology development process, we evaluate current and emerging technology for compatibility with our existing and future software platforms. To this end, we engage with various hardware and software vendors in the evaluation of various new and existing technologies. Where appropriate, we use third-party technology components in the development of our software applications and service offerings. We typically utilize enterprise license agreements or strive to ensure that either alternative suppliers or transfer rights exist in order to ensure the continuity of supply of third-party technology components used in the development of our software applications and service offerings. As a result, we are not materially dependent upon any third-party technology components. Third-party software may be used for highly specialized business functions depending on our ability to develop the functionality internally within time and budget constraints. Additionally, third-party software may be used for routine, commonplace functions within a technology platform environment. We work with our clients to determine the appropriate timing and approach to introduce technology or infrastructure changes to our solutions.

Table of Contents

Government Regulation

Our solutions are subject to a broad range of complex federal, state, and international regulations and requirements, as well as requirements under the rules of self-regulatory organizations including, without limitation, federal truth-in-lending and truth-in-savings rules, federal, state and international money transmission laws, state cybersecurity protection laws, data protection and privacy laws, cyber resilience laws, artificial intelligence laws, usury laws, laws governing state trust charters, the Equal Credit Opportunity Act, the Electronic Funds Transfer Act, the Fair Credit Reporting Act, the Fair Debt Collection Practices Act, the Bank Service Company Act, the Bank Secrecy Act, the USA Patriot Act, the United Kingdom ("U.K"). Money Laundering Regulations, the U.K. Proceeds of Crime Act, the U.K. Criminal Finances Act, the U.K. Sanctions and Anti-Money Laundering Act, the U.K. Economic Crime and Corporate Transparency Act, European Union ("E.U.") Anti-Money Laundering Directives, the Internal Revenue Code, the Employee Retirement Income Security Act, the Health Insurance Portability and Accountability Act, the Community Reinvestment Act and the Dodd-Frank Wall Street Reform and Consumer Protection Act (the "Dodd-Frank Act"), the Securities Exchange Act of 1934, the Investment Advisors Act of 1940 (the "1940 Act"), anti-corruption laws including the U.S. Foreign Corrupt Practices Act of 1977 (the "FCPA") and the U.K. Bribery Act 2010 (the "U.K. Bribery Act"), the rules and regulations of the Financial Industry Regulatory Authority ("FINRA"), the Securities and Exchange Commission ("SEC"), the Federal Financial Institutions Examination Council ("FFIEC"), the Consumer Financial Protection Bureau ("CFPB"), the Financial Conduct Authority in the U.K. ("FCA"), the Central Bank of Ireland in the Republic of Ireland ("CBI"), the Commission de Surveillance du Secteur Financier in Luxembourg ("CSSF"), the Jersey Financial Services Commission in Jersey, Channel Islands ("JFSC") and state financial services regulators (including enforcement of state cybersecurity laws). The compliance of our solutions with these and other applicable laws and regulations depends on a variety of factors, including the manner in which our clients use them. In some cases, we are directly subject to regulatory oversight and examination. In other cases, our clients are contractually responsible for determining what is required of them under applicable laws and regulations and utilize our solutions to achieve compliance with those laws and regulations. In some cases, we may be required to support our clients in achieving compliance with certain laws and regulations by virtue of the services that we provide to them. For example, under the E.U. Digital Operational Resilience Act ("DORA"), which came into force in January 2025, our E.U. financial entity clients will require us, as a third-party provider of information and communication technology services, to contract with and manage our relationships with them (and, where applicable, our relationships with critical third-party technology vendors in our supply chain) in accordance with the requirements of DORA. Failure to support our clients in achieving compliance with DORA and similar global regulatory regimes may cause us to lose revenue or clients and/or result in damage to our reputation, and may also attract scrutiny from regulators. In any event, the failure of our solutions to comply with applicable laws and regulations may result in suspension or revocation of permission-based regulatory licenses, restrictions on our ability to provide those solutions, the imposition of civil fines and/or criminal penalties, loss of client trust, and/or reputational damage. Further, regulatory authorities have the power to, among other things, enjoin "unsafe or unsound" practices, require affirmative actions to correct any violation or practice, issue administrative orders that can be judicially enforced and direct the sale of subsidiaries or other assets. We may be adversely affected by increased regulatory scrutiny or related negative publicity.

The principal areas of regulation impacting our business are the following:

• Oversight by Banking Regulators. As a provider of electronic data processing and back-office services to financial institutions, FIS is subject to regulatory oversight and examination by the FFIEC, an interagency body of federal banking regulators including the Federal Deposit Insurance Corporation ("FDIC"), the Office of the Comptroller of the Currency ("OCC"), the Board of Governors of the Federal Reserve System ("FRB"), the National Credit Union Administration ("NCUA") (collectively, the Federal Banking Agencies or "FBA") and the CFPB, including as part of the Multi-Regional Data Processing Servicer ("MDPS") program. The MDPS program includes technology suppliers that provide mission-critical applications for a large number of financial institutions that are regulated by multiple regulatory agencies. Periodic information technology examination assessments are performed using FFIEC Interagency guidelines to identify potential risks that could adversely affect serviced financial institutions, determine compliance with applicable laws and regulations that affect the services provided to financial institutions, and ensure the solutions we provide to financial institutions do not create systemic risk to the banking system or impact the safe and sound operation of the financial institutions for which we process. In addition, independent auditors annually review several of our operations to provide reports on internal controls for our clients. We are also subject to review and examination by state and international regulatory authorities under state and foreign laws and rules that regulate many of the same activities that are described above, including electronic data processing, payments and back-office services for financial institutions and the use of consumer information.

Table of Contents

Our U.S.-based wealth and retirement business holds a charter in the state of Georgia, which makes us subject to the regulatory compliance requirements of the Georgia Department of Banking and Finance. As a result, we are also authorized to provide trust services in various additional states subject to additional applicable state regulations.

• Payment Services Oversight. Our payment services businesses provide technology services to U.S. financial institutions and are, therefore, subject to oversight and examination by the FFIEC. Our payment services businesses are also subject to regulation, supervision, and enforcement authority of numerous governmental and regulatory bodies in the jurisdictions in which they operate, which include the CFPB and U.S. state regulators. These various regulatory regimes require compliance in respect of many aspects of our payment services businesses including without limitation corporate governance and oversight functions, capital requirements, liquidity, safeguarding, fee regulation adherence, technology and cyber resilience, anti-money laundering and sanctions.

• Anti-Money Laundering. The Company is subject to, both directly and indirectly, various anti-money laundering laws and regulations such as the Bank Secrecy Act in the United States and the Money Laundering Regulations and Proceeds of Crime Act in the U.K. These laws, among other requirements, impose obligations to develop and implement risk-based anti-money laundering programs, file regulatory reports on large cash transactions and suspicious activity, and collect and maintain certain records related to customers and transactions. Many U.S. states have similar laws that overlap with, and in some cases diverge from, U.S. federal and international laws. While these federal, state and international laws are broadly consistent, there may be circumstances where the requirements of a particular jurisdiction conflict with those of other jurisdictions. As these laws continue to develop and expand, our investment in compliance with these laws continues to grow, as does the cost of ongoing compliance.

• Sanctions. The Company is subject to certain U.S. federal, state and international economic and trade sanctions programs, such as those that are administered by the U.S. Treasury's Office of Foreign Assets Control (referred to as "OFAC"), which prohibit or restrict transactions to or from, or dealings with, specified countries and regions, their governments, and in certain circumstances, their nationals, and with individuals and entities that are specially-designated nationals, narcotics traffickers, and terrorists or terrorist organizations. Similar programs exist in a number of other jurisdictions, most notably those administered by the Office of Financial Sanctions Implementation ("OFSI") in the U.K., E.U. sanctions, and United Nations sanctions. We have implemented policies, procedures, and internal controls that are designed to comply with global economic sanctions programs which are increasingly complex and rapidly evolving in response to geopolitical events. Those policies and procedures require the screening of third parties with which the Company does business, including clients and vendors, and transactions where appropriate.

• Anti-Corruption. The Company is subject to applicable anti-corruption laws, including the FCPA and the U.K. Bribery Act, in the jurisdictions in which it operates. Anti-corruption laws generally prohibit offering, promising, giving, or authorizing others to give, anything of value, either directly or indirectly, to a government official or private party in order to influence official action or otherwise to gain an unfair business advantage, such as to obtain or retain business. The Company has implemented policies, procedures, training and internal controls that are designed to comply with such laws, rules and regulations.

• Privacy and Data Protection. The Company is subject to an increasing number of privacy and data protection laws, regulations and directives globally, including the General Data Protection Regulation ("GDPR") in the E.U., the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), the Connecticut Personal Data Privacy and Online Monitoring Act ("CTDPA"), the Utah Consumer Privacy Act, the Gramm-Leach-Bliley Act ("GLBA"), the Fair Credit Reporting Act ("FCRA"), and the Health Insurance Portability and Accountability Act ("HIPAA") in the United States; the U.K.'s General Data Protection Regulation ("U.K. GDPR") and Data Protection Act 2018; the General Personal Data Protection Act ("LGPD") in Brazil; the China Personal Information Protection Law ("PIPL"); and the Japanese Act on the Protection of Personal Information ("APPI") (referred to collectively as "Privacy Laws"). Many of these Privacy Laws place restrictions on the Company's ability to efficiently transfer, access and use personal data across its business. The legislative and regulatory landscape for privacy and data protection continues to evolve.

Our financial institution clients operating in the U.S. are required to comply with privacy regulations imposed under the GLBA and numerous similar state laws. GLBA and those state laws place restrictions on the use of non-public personal information. All financial institutions must disclose detailed privacy policies to their customers and offer them the opportunity to direct the financial institution not to share information with third parties. The regulations under GLBA, however, permit financial institutions to share information with non-affiliated parties who perform services for the financial institutions. As a provider of solutions to financial institutions, we are required to comply with the

Table of Contents

Privacy Laws and are bound by the same limitations on disclosure of the information received from our clients as apply to the financial institutions themselves. A determination that there have been violations of Privacy Laws could expose us to significant damage awards, fines and other penalties that could, individually or in the aggregate, materially harm our business and reputation. Certain operations of the Company are also subject to the newer, comprehensive, U.S. state-level Privacy Laws that provide consumers with additional data protection rights, including the right to be informed about the personal information collected by third parties and the use of that personal information, and which also impose obligations on companies in connection with the use of personal information.

The Company is subject to the E.U.’s GDPR, which applies to all organizations processing the personal data of individuals in the E.U., regardless of where such organization is based. The GDPR has heightened our privacy and data protection compliance obligations, impacted our businesses' collection, processing and retention of personal data and imposed stricter standards for reporting data breaches.

• Oversight by Securities Regulators. Our subsidiary that conducts our broker-dealer business in the U.S. is registered as a broker-dealer with the SEC, is a member of FINRA, and is registered as a broker-dealer in numerous states. Our broker-dealer is subject to regulation and oversight by the SEC. In addition, FINRA, a self-regulatory organization that is subject to oversight by the SEC, adopts and enforces rules governing the conduct, and examines the activities, of its member firms, including our broker-dealer. State securities regulators and various exchanges, including the New York Stock Exchange, also have regulatory or oversight authority over our broker-dealer. Broker-dealers are subject to regulations that cover all aspects of the securities business, including sales methods, trade practices among broker-dealers, public and private securities offerings, use and safekeeping of customers' funds and securities, capital structure, record keeping, the financing of customers' purchases and the conduct and qualifications of directors, officers and employees. In particular, as a registered broker-dealer and member of a self-regulatory organization, we are subject to the SEC's uniform net capital rule, Rule 15c3-1. Rule 15c3-1 specifies the minimum level of net capital a broker-dealer must maintain and also requires that a significant part of a broker-dealer's assets be kept in relatively liquid form. The SEC and various self-regulatory organizations impose rules that require notification when net capital falls below certain predefined criteria, limit the ratio of subordinated debt to equity in the regulatory capital composition of a broker-dealer and constrain the ability of a broker-dealer to expand its business under certain circumstances. Additionally, the SEC's uniform net capital rule imposes certain requirements that may have the effect of prohibiting a broker-dealer from distributing or withdrawing capital and requiring prior notice to the SEC for certain withdrawals of capital.

Our subsidiaries also include an SEC-registered transfer agent. Our registered transfer agent is subject to the Securities Exchange Act of 1934 and the rules and regulations promulgated thereunder. These laws and regulations generally grant the SEC and other supervisory bodies broad administrative powers to address non-compliance with regulatory requirements. Sanctions that may be imposed for non-compliance with these requirements include the suspension of individual employees, limitations on engaging in certain activities for specified periods of time or for specified types of clients, the revocation of registrations, other censures and significant fines.

Subsidiaries engaged in activities outside the U.S. are regulated by various government agencies in the particular jurisdiction where they are chartered, incorporated and/or conduct their business activity. For example, pursuant to the U.K. Financial Services and Markets Act 2000 ("FSMA"), certain of our subsidiaries are subject to regulations promulgated and administered by the FCA. The FSMA and rules promulgated thereunder govern all aspects of the U.K. investment business, including sales, research and trading practices, provision of investment advice, use and safekeeping of client funds and securities, regulatory capital, recordkeeping, margin practices and procedures, approval standards for individuals, financial crime systems and controls, periodic reporting and settlement procedures.

• Money Transfer. Elements of our cash access and money transmission businesses are registered as a Money Services Business and are subject to various federal, state and international laws governing money transmission, including but not limited to the USA PATRIOT Act and reporting requirements of the Bank Secrecy Act, as well as various U.S. federal, state and international sanctions requirements. These businesses may also be subject to certain state and local licensing requirements. The Financial Crimes Enforcement Network, state attorneys general, and other agencies have enforcement responsibility over laws relating to money laundering, currency transmission, and licensing. In applicable states, we have obtained money transmitter licenses. However, changes to state money transmission laws and regulations, including changing interpretations and the implementation of new or varying regulatory requirements, may result in the need for additional or expanded money transmitter licenses, additional capital allocations or changes in the way in which we deliver certain solutions.

Table of Contents

• Consumer Reporting and Protection. Our decision solutions subsidiary, ChexSystems, maintains a database of consumer information used to provide various account opening services, including credit scoring analysis, and is subject to the Federal Fair Credit Reporting Act ("FCRA") and similar state laws. The FCRA regulates consumer reporting agencies ("CRAs"), including ChexSystems, and governs the accuracy, fairness, and privacy of information in the files of CRAs that engage in the practice of assembling or evaluating certain information relating to consumers for certain specified purposes. CRAs are required to follow reasonable procedures to ensure maximum possible accuracy of information concerning the individual to whom the report relates and, if a consumer disputes the accuracy of any information in the consumer's file, to conduct a reasonable investigation within statutory timelines. The FCRA imposes many other requirements on CRAs and users of consumer report information. Regulatory enforcement of the FCRA is under the purview of the United States Federal Trade Commission, the CFPB, and state attorneys general, acting alone or in concert with one another. CRAs are also regulated by a number of states, including New York, with consumer reporting laws that are not pre-empted by the FCRA. In furtherance of our objectives of data accuracy, fair treatment of consumers, protection of consumers' personal information, and compliance with these laws, we have made considerable investment to maintain a high level of security for our computer systems in which consumer data resides, and we maintain consumer relations call centers to facilitate accurate and timely handling of consumer requests for information and disputes. We also are focused on ensuring our operating environments safeguard and protect consumers' personal information in compliance with these laws.

Our consumer reporting and consumer-facing businesses are subject to CFPB Bulletin 2013-7 (a successor to the former Regulation AA - Unfair Deceptive Acts or Practices), which defines Unfair, Deceptive or Abusive Acts or Practices ("UDAAP"). This specific bulletin states that UDAAPs can cause significant financial injury to consumers, erode consumer confidence, and undermine fair competition in the financial marketplace. Original creditors and other covered persons and service providers under the Dodd-Frank Act involved in collecting debt related to any consumer financial product or service are subject to the prohibition against UDAAPs in the Dodd-Frank Act.

In addition, our U.K. regulated entity, Platform Securities LLP, is required to comply with the FCA’s Consumer Duty (the "Duty") in connection with its Wealth business. The Duty sets high standards of consumer protection across financial services and requires firms to put their customers' needs first.

• Debt Collection. Our collection services are subject to the Federal Fair Debt Collection Practices Act and various state collection laws and licensing requirements. The Federal Trade Commission, as well as state attorneys general and other agencies, have enforcement responsibility over the collection laws, as well as the various credit reporting laws.

The foregoing list of laws and regulations to which our Company is subject is not exhaustive, and the regulatory framework governing our operations changes continuously. Enactment of new laws and regulations may increasingly affect the operations of our business, directly and indirectly, which could result in substantial regulatory compliance costs, litigation expense, adverse publicity, and/or loss of revenue.

Human Capital Management

Employee Population

As of December 31, 2024, we had more than 50,000 employees, including over 32,000 employees principally employed outside of the U.S. None of our U.S. workforce currently is unionized. Approximately 6,000 of our employees, primarily in Brazil and Europe, are represented by labor unions or works councils as of December 31, 2024.

Health and Safety

The health and safety of our employees is a key priority. We have implemented a comprehensive wellness program focused on all aspects of employee wellness – physical, mental, social, and financial. Initiatives under this program are designed to promote healthy lifestyle habits.

We continue to operate FIS Cares, a global employee-funded giving program designed to help our employees in times of need. We remain committed to providing a safe working environment that minimizes health risks and prioritizes physical safety.

Table of Contents

Corporate Culture

Our culture stems from embracing our corporate values as we work together to win as one team, lead with integrity and strive to "be the change" for our employees, clients and communities. We believe that inclusion and belonging are at the core of our corporate values. Our focus on continuous learning and a respectful, inclusive environment helps us use our collective strengths to innovate and deliver the best solutions for our clients and partners. The Chief Executive Officer and the Chief People Officer regularly update our Board of Directors on human capital management and culture.

Talent Management

Along with our clients and communities, our employees are primary stakeholders in our organization, and so we place a strategic priority on developing our talent and fostering a culture aligned with our corporate values and in which employees receive the support needed to grow and develop their skills and capabilities.

Our talent development program provides an enterprise-wide, systematic foundation for career development tied to learning paths that enable skills development. Our talent practices are based on a future-focused development approach to equip FIS leaders with the skills required to enable business growth and exceed the needs of our clients. Our employees have a learning roadmap to ‘Build our Leaders of Tomorrow’ which is supported by access to an extensive selection of online self-paced learning resources, virtual instructor-led and face-to-face development offerings, and targeted development programs for high-potential and senior management employees. We engage in executive-level succession planning and provide extensive opportunities to apply for open roles within our organization. Our talent development practices are underpinned by a comprehensive talent planning and feedback culture.

Available Information

Our website address is www.fisglobal.com. We make our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, and Current Reports on Form 8-K, and any amendments to those reports, available, free of charge, on that website as soon as reasonably practicable after we file or furnish them to the SEC. Our Corporate Governance Policy and Code of Business Conduct and Ethics are also available on our website and are available in print, free of charge, to any shareholder who mails a request to the Corporate Secretary, Fidelity National Information Services, Inc., 347 Riverside Avenue, Jacksonville, FL 32202 USA. Other corporate governance-related documents can be found at our website as well. However, the information found on our website is not a part of this or any other report.

In addition to the normal risks of business, we are subject to significant risks and uncertainties, including those listed below and others described elsewhere in this Annual Report on Form 10-K. Any of the risks described herein, as well as risks currently unknown or immaterial, could result in a significant adverse effect on our business, financial condition or results of operations.

Risks Related to Our Business and Operations

Security breaches, privacy breaches, cyberattacks, unintentional disclosures of confidential information, third-party breaches, service outages, or a failure to comply with information security laws or regulations, contractual provisions, or industry security requirements by us, our vendors, clients, or technology partners could harm our business by disrupting delivery of services, exposing sensitive or confidential information, or damaging our reputation, any of which could result in a breach of one or more client contracts or regulatory investigations, enforcement actions, fines or litigation.

Cybersecurity is fundamental to our complex, global business. We and our vendors, service providers, technology partners, and clients electronically receive, process, store and transmit sensitive and confidential information of our business partners, clients and such clients' customers. We collect consumer personal data, such as names and addresses, Social Security Numbers, driver’s license numbers, financial account numbers, transactional history, cardholder data and payment history records. Such information is necessary to support our clients' transaction processing and to conduct our check authorization and collection businesses. We also collect personal data from our employees and contractors as necessary to support those relationships, comply with legal obligations, manage our workforce, and provide compensation and benefits. Our information systems and networks are dependent upon hardware, software, communication infrastructure and other technological components that are both developed by us and provided by third parties. These components sometimes require patches, updates, or remediation of known or potential vulnerabilities. Implementation challenges in timely completing these tasks can lead to security vulnerabilities that expose us, our systems and data to potential compromise or interruption. Our information systems are also

Table of Contents

vulnerable to human error as well as malicious insider threats. Finally, the systems we rely on, which include hardware and software manufactured, developed or operated by third-party vendors and service providers, have in the past been subject to, and may in the future be subject to, cyber attacks or security incidents due to employee error or malfeasance, software bugs, hardware malfunctions or other security vulnerabilities.

The uninterrupted operation of information systems operated by us, our vendors and service providers, and other third parties, as well as the confidentiality of the customer or consumer information that resides on such systems, is critical to the successful operation of our Company. For that reason, security or privacy breaches are some of the principal operational risks we face as a provider of services to financial institutions and businesses. Like other such providers, we are a regular target of attempts to identify and exploit system vulnerabilities and/or penetrate or bypass our security measures to gain unauthorized access to our networks and systems. If we fail to maintain an adequate security infrastructure, adapt to emerging security threats (such as the use of artificial intelligence by threat actors in furtherance of cyber attacks), regularly identify security vulnerabilities, prevent unauthorized access, identity theft or other cybersecurity risks (e.g., distributed denial of service, ransomware, and other cyber attacks), manage vendor or supply chain cybersecurity risks, adequately train users of our information systems, or implement sufficient security standards and technology to protect against security or privacy breaches, then the confidentiality, integrity or availability of the information we secure could be compromised. Unauthorized access to, or abuse of authorized access to, our computer systems or databases or our vendors' computer systems or databases could result in the theft or publication of confidential information and personal data, the deletion or modification of records, disruption of service delivery, installation of malware, and the potential need to pay ransom or otherwise cause interruptions in our operations. These issues could give rise to legal actions from clients and/or such clients' customers, regulatory investigations or enforcement activity, losses and expenses associated with such events, and damage to our reputation. Because we serve a diverse client base with different technology and service needs, we must continue to enhance our ability to manage the risks from the resulting diversity in potential security attacks.

As a provider of services to financial institutions and businesses, we are bound by many of the same limitations on disclosure of the information we receive from clients that apply to the clients themselves. If we fail to comply with these regulations and industry security requirements, including those imposed by the payment card industry through its digital security standards and other rules, we could be exposed to damages from legal actions from clients and/or their customers, governmental proceedings, public disclosure and consumer notification requirements, and the imposition of significant fines or prohibitions on providing services. We operate in a highly regulated environment and are subject to a myriad of complex, evolving regulations and standards, including cybersecurity and privacy laws, regulations and industry standards. In addition, if more restrictive privacy laws, data protection rules or industry security requirements are adopted in the future on the federal or state level, or by a non-U.S. jurisdiction in or from which we serve clients, or by a specific industry body, those changes could have an adverse impact on our Company through increased costs or by imposing changes or inefficiencies on business processes.

A material privacy or security incident would trigger SEC disclosure obligations and could trigger other applicable disclosure requirements, or be disclosed publicly, even if there is no legally required disclosure. Incident disclosure may increase the risks of private lawsuits or government enforcement action related to incidents, increase attention from malicious actors, and lead to greater regulatory scrutiny. The occurrence of any such incidents, and the related responses (if any) by regulators or third parties, may result in adverse publicity and reputational harm to us.

If we are unable, or appears to be unable, to prevent cybersecurity or privacy breaches, we risk reputational damage. Our existing clients could lose confidence in our information systems and consequently choose to terminate their agreements with us. Such reputational harm could also inhibit our ability to attract new clients; potentially increase government, regulatory, or media scrutiny; or give rise to new regulatory requirements that adversely affect our ability to do business in one or more parts of the world.

If we fail to innovate or adapt our solutions to changes in technology or in the marketplace, or if our ongoing efforts to upgrade or implement our technology are not successful, we could lose clients, or our clients could lose customers, and we could have difficulty attracting new clients for our solutions.

The markets for our solutions are characterized by constant technological changes, frequent introductions of new solutions and evolving industry standards. Our future success will be signif

Showing the first 8K of 82K characters. Open the full section

None.

Table of Contents

Cybersecurity is fundamental to FIS' complex, global business. As part of our business, FIS and its vendors, technology partners, and clients electronically receive, process, store and transmit a wide range of confidential information, including sensitive customer information and consumer personal data. Our operations extend to managing payment systems, cash access and prepaid card systems. Cyberattacks on information technology systems and the vendors and technological supply chain they rely on continue to grow in frequency, complexity and sophistication. This is a trend we expect to continue. Cyberattacks have garnered significant attention from individuals, businesses, governmental entities and the media drawing the focus of a large ecosystem of criminal threat actors. The objectives of these cyberattacks include, among other things, gaining unauthorized access to systems to disrupt operations, steal information, seek ransom payments from victims, perpetrate financial fraud, or sell stolen information. Perpetrators of cyberattacks attempt to exploit technical, human, social, and organizational vulnerabilities to gain unauthorized access. There is a growing trend of identifying and exploiting vulnerabilities in widely used technologies or vendor systems, allowing a single compromise or failure to extend unauthorized access to numerous systems.

FIS takes actions to assess, identify, and manage risks from cybersecurity threats to our information systems and those of our vendors and technology partners. A significant focus of our ongoing efforts is how we identify these vulnerabilities and prevent and respond to cyberattacks. Our processes include the activities of the FIS Cyber Fusion Center, which provides 24x7x365 cybersecurity threat monitoring and response. They also include structured defense-in-depth initiatives, such as perimeter security, remote access security, endpoint security, application security and identity management. In addition, we engage in extensive information security training of our employees who use and access our information systems. Our process for identification and management of risks from cybersecurity threats includes regular communication with cyber experts, engagement of cybersecurity partners to review our systems, regular audits of our information security by third-party assessors and consultants, and regular interactions with vendors and technology partners to oversee and identify material risks associated with the information systems utilized by such persons.

Our process of identifying and remediating cybersecurity risks has been integrated into our overall risk management system and processes. It is overseen by our Chief Information Security Officer and Chief Risk Officer, who report to our Board of Directors and its Risk and Technology Committee on a quarterly basis. The Chief Information Security Officer provides ongoing oversight for the management of cybersecurity risks across the firm leveraging a series of qualitative and quantitative risk assessment routines. Risk escalations are facilitated through the enterprise risk management framework, including the Company's Enterprise Risk Committee and the Board of Directors via the Risk and Technology Committee. Facilitated via regular updates on cybersecurity risk, our Board of Directors takes an active role in overseeing, managing, and setting risk tolerances for our cybersecurity program. Our Chief Information Security Officer has over 15 years of technology and cybersecurity experience, including previous senior leadership roles at major financial institutions and possesses industry certifications such as the Certified Information Systems Security Professional (CISSP). Additional leaders and key contributors composing the cybersecurity leadership team possess specific expertise, certifications, and previous work experience aligned to their assigned responsibilities. Our Enterprise Risk Committee, responsible for providing oversight for cybersecurity risks, is a cross-functional representation of senior leadership with requisite experience and expertise to provide risk oversight, including the Chief Risk Officer, Chief Legal Officer, Chief Technology Officer, Chief Compliance Officer, Chief Privacy Officer, and FIS Business Presidents.

FIS remains focused on making additional strategic investments in information security to protect our clients and our information systems from risks from cybersecurity threats. This includes both capital expenditures and operating expenses on hardware, software, staff and consulting services. These investments in the past have been and are reasonably likely to continue to be material to our results of operations. Further, notwithstanding our investments and other processes and efforts described above and elsewhere in this Annual Report on Form 10-K, we cannot guarantee that FIS will not be the subject of a cyberattack that would have a material effect on its financial condition or results of operations. See "Risk Factors" in Item 1A.

The continued growth in the frequency, complexity and sophistication of cyberattacks presents both a threat and an opportunity for FIS. Using expertise we have gained from our ongoing focus and investment, we have developed and we offer fraud, security, risk management and compliance solutions to target this growth opportunity in the financial services industry. We also use certain of these solutions to manage our own risks.

Table of Contents

We have not identified any previous cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. For a full discussion of risks from cybersecurity threats, see the section entitled "Risk Factors" in Item 1A.

FIS' corporate headquarters is located at 347 Riverside Avenue, Jacksonville, Florida. In addition, FIS owns or leases support centers, data processing facilities and other facilities at approximately 85 locations. We believe our facilities and equipment are generally well maintained and are in good operating condition. We believe that the equipment we own and our various facilities are adequate for our present and foreseeable business needs.

The Company is involved in various pending and threatened litigation matters related to its business and operations, some of which include claims for punitive or exemplary damages. The Company believes no such currently pending or threatened actions are likely to have a material adverse effect on its consolidated financial position. With respect to litigation in which the Company is involved generally, please note the following:

• These matters raise difficult and complicated factual and legal issues and are subject to many uncertainties and complexities.

• The Company reviews all of its litigation on an ongoing basis and follows the authoritative provision for accounting for contingencies when making accrual and disclosure decisions. A liability must be accrued if (a) it is probable that a liability has been incurred and (b) the amount of loss can be reasonably estimated. If one of these criteria has not been met, disclosure is required when there is at least a reasonable possibility that a material loss may be incurred. When assessing reasonably possible and probable outcomes, the Company bases decisions on the assessment of the ultimate outcome following all appeals. Legal fees associated with defending litigation matters are expensed as incurred.

See Note 18 to the consolidated financial statements for information about certain legal matters and indemnifications and warranties.

Not applicable.

PART II

Our common stock trades on the New York Stock Exchange under the ticker symbol "FIS." As of January 31, 2025, there were approximately 9,024 shareholders of record of our common stock.

In January 2025, the Board of Directors approved a quarterly dividend of $0.40 per share beginning with the first quarter of 2025. A regular quarterly dividend of $0.40 per common share is payable on March 25, 2025, to shareholders of record as of the close of business on March 11, 2025. We currently expect to continue to pay quarterly dividends at a target payout ratio consistent with our capital allocation strategy, without regard to our equity method investment earnings (loss) attributable to our interest retained in Worldpay post-separation. However, the amount, declaration and payment of future dividends is at the discretion of the Board of Directors and depends on, among other things, our investment opportunities (including potential mergers and acquisitions), results of operations, financial condition, cash requirements, future prospects, and other factors, including legal and contractual restrictions, that may be considered relevant by our Board of Directors. Additionally, the payment of cash dividends may be limited by covenants in certain debt agreements.

In January 2021, our Board of Directors approved a share repurchase program under which it authorized the Company to repurchase up to 100 million shares of our common stock. In August 2024, our Board of Directors approved a separate, incremental share repurchase program authorizing the repurchase of up to $3.0 billion in aggregate value of shares of our

Table of Contents

common stock. Repurchases under these programs will be made at management's discretion from time to time on the open market or in privately negotiated transactions and through Rule 10b5-1 plans. Neither of these repurchase programs has an expiration date, and either program may be suspended for periods, amended or discontinued at any time. Under the January 2021 program, the Company repurchased approximately 54 million shares for an aggregate of $4.0 billion in 2024, approximately 9 million shares for an aggregate of $0.5 billion in 2023, and approximately 21 million shares for an aggregate of $1.8 billion in 2022. Approximately 1 million shares remained available for repurchase under the January 2021 program as of December 31, 2024, and the Company will exhaust its authorization under this program in the first quarter of 2025, after which it will repurchase shares under the 2024 authorization.

The following table summarizes the shares repurchased by the Company under the January 2021 program during the three-month period ended December 31, 2024, and the number of shares remaining authorized for repurchase by the Company. As of December 31, 2024, the Company had not repurchased any shares under the August 2024 program.

The graph below compares Fidelity National Information Services, Inc.'s cumulative 5-year total shareholder return on common stock with the cumulative total returns of the S&P 500 index and the S&P Supercap Data Processing & Outsourced Services index. The graph tracks the performance of a $100 investment in our common stock and in each index (with the reinvestment of all dividends) from 12/31/2019 to 12/31/2024.

Table of Contents

The stock price performance included in this graph is not necessarily indicative of future stock price performance.

The following section discusses management's view of the financial condition and results of operations of FIS and its consolidated subsidiaries as of December 31, 2024 and 2023, and for the years ended December 31, 2024, 2023 and 2022, unless otherwise noted.

This section should be read in conjunction with our audited consolidated financial statements and related notes included elsewhere in this Annual Report. Management's Discussion and Analysis of Financial Condition and Results of Operations contains forward-looking statements. See "Statement Regarding Forward-Looking Information" and "Risk Factors" in Item 1A

Table of Contents

of this Annual Report for a discussion of the uncertainties, risks and assumptions associated with these forward-looking statements that could cause future results to differ materially from those reflected in this section.

Business Trends and Conditions

Revenue Sources and Markets

Our revenue from continuing operations is primarily derived from a combination of technology and processing solutions, transaction processing fees, professional services and software license fees. While we are a global company and do business around the world, the majority of our revenue is generated by clients in the U.S. The majority of our international revenue is generated by clients in the U.K., Germany, Canada, Australia, Brazil, Switzerland and France. In addition, the majority of our revenue has historically been recurring under multi-year Banking and Capital Markets contracts that contribute relative stability to our revenue stream. These solutions, in general, are considered critical to our clients' operations. Professional services revenue is typically non-recurring, though recognition often occurs over time rather than at a point in time. Sales of software licenses are typically non-recurring with point-in-time recognition and are less predictable.

Economic Trends

We are experiencing relatively stable sales cycles and levels of client activity across our businesses. We have experienced, and continue to experience, relatively high inflation in our primary markets over the medium-term cycle. Relatively high interest rates have had, and may continue to have, a negative impact on our interest expense. However, during 2024, we used a portion of the net proceeds from the Worldpay Sale to repay our borrowings under our commercial paper programs and reduce our long-term debt, which has decreased our interest expense from previous levels. Impacts of foreign currency fluctuations remained slightly favorable during 2024. Given the volatility of exchange rates and the mix of currencies involved in both revenues and expenses, the direction and magnitude of future effects of currency fluctuations are uncertain.

Worldpay Sale

On January 31, 2024, the Company completed the Worldpay Sale for cash consideration in a transaction valuing the Worldpay Merchant Solutions business at an enterprise value of $18.5 billion, including $1.0 billion of consideration contingent on the returns realized by Buyer exceeding certain thresholds. The net cash proceeds received by FIS at the closing were greater than $12 billion, net of estimated closing adjustments, debt restructuring fees, taxes and transaction costs. We used a portion of the proceeds from the sale to retire debt and repurchase shares, and we plan to continue to use the remaining proceeds to return additional capital to shareholders through our existing share repurchase authorizations, as well as for general corporate purposes, including acquisitions, while maintaining an investment grade credit rating. In connection with the Worldpay Sale, FIS and Worldpay entered into commercial agreements, preserving a key value proposition for clients of both businesses and minimizing potential dis-synergies. FIS and Worldpay also entered into additional agreements as described in Note 4 to the consolidated financial statements. Upon closing of the Worldpay Sale, we retained a non-controlling 45% equity interest in Worldpay. FIS' share of the net income of Worldpay subsequent to the sale is reported as Equity method investment earnings (loss), net of tax.

As a result of the Worldpay Sale, we recorded an estimated loss on sale of $578 million during 2024. We also recorded a tax benefit of $1.1 billion, primarily from the release of U.S. deferred tax liabilities that were not transferred in the Worldpay Sale, net of the estimated U.S. tax cost that we expect to incur as a result of the Worldpay Sale. Completion of remaining purchase agreement provisions in connection with the Worldpay Sale could result in further adjustments to the loss on sale amount and the estimated U.S. tax cost.

Investments in Innovation

We continue to assist financial institutions and other businesses in migrating to outsourced integrated technology solutions to improve their profitability and address increasing and ongoing regulatory requirements. We believe our integrated solutions and outsourced services are well-positioned to address this outsourcing trend across the markets we serve.

We continue to invest in modernization, innovation and integrated solutions to meet the demands of the markets we serve and to compete with global banks, financial and other technology providers, and emerging technology innovators. We invest both internally and through investment opportunities in companies building complementary technologies in the financial services space. Our internal development activities have related primarily to the modernization of our proprietary core systems in each of our segments, design and development of next-generation digital and innovative solutions and development of

Table of Contents

processing systems and related software applications and risk management platforms. We expect to continue to invest an appropriate level of resources to maintain, enhance and extend the functionality of our proprietary systems and existing software applications, to develop new and innovative software applications and systems to address emerging technology trends in response to the needs of our clients, and to enhance the capabilities of our outsourcing infrastructure.

Digital One Platform

Consumer preference, particularly in younger generations, continues to shift from traditional branch banking services to digital-first banking solutions. It is increasingly clear that a priority for our clients is to provide a unified, engaging and inclusive banking experience powered by digital capabilities across all channels and customer activities. Our Digital One platform helps our clients, from top-tier large financial institutions with over $10 billion in assets to top-tier and mid-tier community banks, provide a set of modern digital solutions to support all customer types, including retail consumers, sole proprietors, small businesses and large corporations, through any channel, including desktop, tablet, smartphone, and branch. The uniform customer experience extends to support a broad range of financial services including opening new accounts, servicing existing accounts, money movement, and personal financial management, as well as other consumer, small business and commercial banking capabilities. The Digital One platform is host-agnostic, and our digital suite has been enabled across multiple FIS core banking platforms, including IBS, Horizon, Modern Banking Platform, AffinityEdge, and Systematics, in addition to non-FIS platforms run by banking financial institutions who demand market-leading digital capabilities.

Banking Industry Consolidation

Consolidation within the banking industry has occurred and may continue to occur, primarily in the form of merger and acquisition activity among financial institutions, which generally increases compe

Showing the first 8K of 63K characters. Open the full section

Market Risk

We are exposed to market risks primarily from changes in interest rates and foreign currency exchange rates. We periodically use certain derivative financial instruments, including interest rate swaps, cross-currency interest rate swaps and foreign currency forward contracts, to manage interest rate and foreign currency risk. We do not use derivatives for trading purposes, to generate income or to engage in speculative activity.

Table of Contents

Interest Rate Risk

In addition to existing cash balances and cash provided by operating activities, we use fixed-rate and variable-rate debt to finance our operations. We are exposed to interest rate risk on these debt obligations.

Our fixed-rate senior notes (as included in Note 14 to the consolidated financial statements) represent the majority of our fixed-rate long-term debt obligations as of December 31, 2024. The carrying value, excluding the fair value basis adjustments due to interest rate swaps described below and unamortized discounts, of our senior notes was $10.7 billion as of December 31, 2024. The fair value of our senior notes was approximately $9.9 billion as of December 31, 2024. The potential reduction in fair value of the senior notes from a hypothetical 10 percent increase in market interest rates would not be material to the overall fair value of the debt.

Our variable-rate risk principally relates to borrowings under our U.S. commercial paper program, Euro-commercial paper program and Revolving Credit Facility (as included in Note 14 to the consolidated financial statements) (collectively, "variable-rate debt"). As of December 31, 2024, our weighted-average cost of debt was 2.8% with a weighted-average maturity of 6.2 years; 93% of our debt was fixed rate, and the remaining 7% was variable-rate debt, inclusive of fair value basis adjustments due to interest rate swaps. A 100 basis-point increase in the weighted-average interest rate on our variable-rate debt would have increased our 2024 annual interest expense by $8 million. We performed the foregoing sensitivity analysis based solely on the outstanding balance of our variable-rate debt as of December 31, 2024. This sensitivity analysis does not take into account any changes that occurred in the prior 12 months or that may take place in the next 12 months in the amount of our outstanding debt. Further, this sensitivity analysis assumes the change in interest rates is applicable for an entire year. For comparison purposes, based on the outstanding balance of our variable-rate debt as of December 31, 2023, and calculated in the same manner as set forth above, an increase of 100 basis points in the weighted-average interest rate would have increased our annual interest expense by approximately $49 million.

Foreign Currency Risk

We are exposed to foreign currency risks that arise from normal business operations. These risks include the translation of local currency balances of foreign subsidiaries, transaction gains and losses associated with intercompany loans with foreign subsidiaries and transactions denominated in currencies other than a location's functional currency. We manage the exposure to these risks through a combination of normal operating activities and the use of foreign currency forward contracts and non-derivative and derivative instruments.

Our exposure to foreign currency exchange risks generally arises from our non-U.S. operations, to the extent they are conducted in local currency. Changes in foreign currency exchange rates affect translations of revenue denominated in currencies other than the U.S. Dollar. During the years ended December 31, 2024, 2023 and 2022, we generated approximately $1,267 million, $1,261 million and $1,288 million, respectively, in revenue denominated in currencies other than the U.S. Dollar. The major currencies to which our revenue is exposed are the British Pound Sterling, Euro, Brazilian Real, Australian Dollar, Swedish Krona, Swiss Franc and Indian Rupee. A 10% movement in average exchange rates for these currencies (assuming a simultaneous and immediate 10% change in all of such rates for the relevant period) would have resulted in the following increase or decrease in our reported revenue for the years ended December 31, 2024, 2023 and 2022 (in millions):

While our results of operations have been impacted by the effects of currency fluctuations, our international operations' revenue and expenses are generally denominated in local currency, which reduces our economic exposure to foreign exchange risk in those jurisdictions.

Table of Contents

Our foreign exchange risk management policy permits the use of derivative instruments, such as forward contracts and options, to reduce volatility in our results of operations and/or cash flows resulting from foreign exchange rate fluctuations. We do not enter into foreign currency derivative instruments for trading purposes or to engage in speculative activity. We do periodically enter into foreign currency forward contracts to hedge foreign currency exposure to intercompany loans, other balance sheet items or expected foreign currency cash flows resulting from forecasted transactions. The Company also utilizes foreign currency-denominated debt and cross-currency interest rate swaps designated as net investment hedges in order to reduce the volatility of the net investment value of certain of its non-U.S. dollar functional currency subsidiaries and utilizes cross-currency interest rate swaps designated as fair value hedges in order to mitigate the impact of foreign currency risk associated with our foreign currency-denominated debt (see Note 15 to the consolidated financial statements).

Table of Contents

FIDELITY NATIONAL INFORMATION SERVICES, INC.

AND SUBSIDIARIES

INDEX TO FINANCIAL INFORMATION

Table of Contents

Report of Independent Registered Public Accounting Firm

To the Stockholders and Board of Directors

Fidelity National Information Services, Inc.:

Opinion on Internal Control Over Financial Reporting

We have audited Fidelity National Information Services, Inc. and subsidiaries' (the Company) internal control over financial reporting as of December 31, 2024, based on criteria established in Internal Control – Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. In our opinion, the Company maintained, in all material respects, effective internal control over financial reporting as of December 31, 2024, based on criteria established in Internal Control – Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission.

We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the consolidated balance sheets of the Company as of December 31, 2024 and 2023, the related consolidated statements of earnings (loss), comprehensive earnings (loss), equity, and cash flows for each of the years in the three-year period ended December 31, 2024, and the related notes (collectively, the consolidated financial statements), and our report dated February 13, 2025 expressed an unqualified opinion on those consolidated financial statements.

Basis for Opinion

The Company’s management is responsible for maintaining effective internal control over financial reporting and for its assessment of the effectiveness of internal control over financial reporting, included in the accompanying Management's Report on Internal Control over Financial Reporting. Our responsibility is to express an opinion on the Company’s internal control over financial reporting based on our audit. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.

We conducted our audit in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether effective internal control over financial reporting was maintained in all material respects. Our audit of internal control over financial reporting included obtaining an understanding of internal control over financial reporting, assessing the risk that a material weakness exists, and testing and evaluating the design and operating effectiveness of internal control based on the assessed risk. Our audit also included performing such other procedures as we considered necessary in the circumstances. We believe that our audit provides a reasonable basis for our opinion.

Definition and Limitations of Internal Control Over Financial Reporting

A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. A company’s internal control over financial reporting includes those policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the company; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

/s/ KPMG LLP

Jacksonville, Florida

February 13, 2025

Table of Contents

Report of Independent Registered Public Accounting Firm

To the Stockholders and Board of Directors

Fidelity National Information Services, Inc.:

Opinion on the Consolidated Financial Statements

We have audited the accompanying consolidated balance sheets of Fidelity National Information Services, Inc. and subsidiaries (the Company) as of December 31, 2024 and 2023, the related consolidated statements of earnings (loss), comprehensive earnings (loss), equity, and cash flows for each of the years in the three-year period ended December 31, 2024, and the related notes (collectively, the consolidated financial statements). In our opinion, the consolidated financial statements present fairly, in all material respects, the financial position of the Company as of December 31, 2024 and 2023, and the results of its operations and its cash flows for each of the years in the three-year period ended December 31, 2024, in conformity with U.S. generally accepted accounting principles.

We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the Company’s internal control over financial reporting as of December 31, 2024, based on criteria established in Internal Control – Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission, and our report dated February 13, 2025 expressed an unqualified opinion on the effectiveness of the Company’s internal control over fi

Showing the first 8K of 259K characters. Open the full section

None.

As of the end of the year covered by this report, we carried out an evaluation, under the supervision and with the participation of our principal executive officer and principal financial officer, of the effectiveness of the design and operation of our disclosure controls and procedures, as such term is defined in Rule 13a-15 (e) under the Securities Exchange Act of 1934, as amended (the "Exchange Act"). Based on this evaluation, our principal executive officer and principal financial officer concluded that our disclosure controls and procedures were effective to ensure that information required to be disclosed by us in the reports that we file or submit under the Exchange Act is (a) recorded, processed, summarized and reported within the time periods specified in the Commission's rules and forms and (b) accumulated and communicated to management, including our principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosure.

There have been no changes in our internal control over financial reporting that occurred during the most recent fiscal quarter that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

MANAGEMENT'S REPORT ON INTERNAL CONTROL OVER FINANCIAL REPORTING

Management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Exchange Act Rules 13a-15(f). Under the supervision and with the participation of our management, including our principal executive officer and principal financial officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting. Management has adopted the framework in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission ("COSO"). Based on our evaluation under this framework, our management concluded that our internal control over financial reporting was effective as of December 31, 2024. KPMG LLP, an independent registered public accounting firm, has issued an attestation report on our internal control over financial reporting as set forth in Item 8.

During the quarter ended December 31, 2024, Mr. Jeffrey Goldstein, Independent Chair of the Company’s Board of Directors, adopted a trading plan intended to satisfy the affirmative defense of Rule 10b5-1(c). Under the plan, which was adopted on November 18, 2024, Mr. Goldstein instructed his broker to purchase shares of FIS common stock each quarter in an amount approximately equal to his cash director fees, which are paid quarterly in equal installments. The aggregate purchase price for shares to be purchased under the plan is $241,000. The trading plan will expire on the earlier of January 30, 2026 or the date on which all purchases under the plan have been completed. Mr. Goldstein has informed the Company that he intends to continue to use the full amount of his cash director fees to purchase FIS common stock for so long as he remains a Director of the Company.

Not applicable.

PART III

Items 10-14.

Within 120 days after the close of its fiscal year, the Company intends to file with the SEC a definitive proxy statement pursuant to Regulation 14A of the Securities Exchange Act of 1934, as amended, which will include the matters required by these items and is incorporated herein by reference.

PART IV

(1)Financial Statement Schedules: All schedules have been omitted because they are not applicable, not material or the required information is included in the consolidated financial statements or notes thereto.

(2)Exhibits: The following is a complete list of exhibits included as part of this report, including those incorporated by reference. A list of those documents filed with this report is set forth on the Exhibit Index appearing elsewhere in this report and is incorporated by reference.

(1) Management contract or compensatory plan or arrangement.

*Filed or furnished herewith

+ Pursuant to Rule 406T of Regulation S-T, the Interactive Data Files on Exhibit 101 hereto are deemed not filed or part of a registration statement or prospectus for purposes of Sections 11 or 12 of the Securities Act of 1933, as amended, are deemed not filed for purposes of Section 18 of the Securities Exchange Act of 1934, as amended, and otherwise are not subject to liability under those sections.

None.

SIGNATURES

Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the registrant and in the capacities and on the dates indicated.