ServiceNow 10-Q 2024-06-30

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-Q

(Mark One)

For the quarterly period ended June 30, 2024

OR

Commission File Number: 001-35580

SERVICEN****OW, I****NC.

(Exact name of Registrant as specified in its charter)

ServiceNow, Inc.

2225 Lawson Lane

Santa Clara, California 95054

(Address, including zip code, of Registrant’s principal executive offices)

(408) 501-8550

(Registrant’s telephone number, including area code)

Not Applicable

(Former name, former address and formal fiscal year, if changed since last report)

Securities registered pursuant to Section 12(b) of the Act**:**

Indicate by check mark whether the Registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the Registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days: Yes ☒ No ☐

Indicate by check mark whether the Registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the Registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the Registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the Registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the Registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

As of June 30, 2024, there were approximately 206 million shares of the Registrant’s Common Stock outstanding.

TABLE OF CONTENTS

i

PART I

SERVICENOW, INC.

CONDENSED CONSOLIDATED BALANCE SHEETS

(in millions, except number of shares which are reflected in thousands)

See accompanying notes to condensed consolidated financial statements

SERVICENOW, INC.

CONDENSED CONSOLIDATED STATEMENTS OF COMPREHENSIVE INCOME

(in millions, except number of shares which are reflected in thousands and per share data)

(unaudited)

(1)Includes stock-based compensation as follows:

| | | | | | | | | | | | | | | | | | | | | | | |

Showing the first 8K of 87K characters. Open the full section

The following discussion and analysis of our financial condition, results of operations and cash flows should be read in conjunction with the (1) unaudited condensed consolidated financial statements and the related notes thereto included elsewhere in this Quarterly Report on Form 10-Q, and (2) the audited consolidated financial statements and notes thereto and management’s discussion and analysis of financial condition and results of operations for the year ended December 31, 2023 included in the Annual Report on Form 10-K filed with the Securities and Exchange Commission (the “SEC”), on January 25, 2024. This Quarterly Report on Form 10-Q contains “forward-looking statements” within the meaning of Section 21E of the Securities Exchange Act of 1934, as amended (the “Exchange Act”). These statements are often identified by the use of words such as “may,” “will,” “expect,” “believe,” “anticipate,” “intend,” “could,” “estimate,” or “continue,” and similar expressions or variations. Forward-looking statements are subject to risks, uncertainties and other factors that could cause actual results and the timing of certain events to differ materially from future results expressed or implied by the forward-looking statements. Factors that could cause or contribute to such differences include, but are not limited to those identified herein, and those discussed in the section titled “Risk Factors” in Part I, Item 1A of our Annual Report on Form 10-K filed with the SEC on January 25, 2024 and in Part II, Item 1A of this Quarterly Report on Form 10-Q and in our other SEC filings. We disclaim any obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements.

Investors and others should note that we announce material financial information to our investors using our investor relations website (https://www.servicenow.com/company/investor-relations.html), SEC filings, press releases, public conference calls and webcasts. We use these channels, as well as social media, to communicate with our investors and the public about our Company, our services and other issues. It is possible that the information we post on social media could be deemed to be material information. Therefore, we encourage investors, the media and others interested in our Company to review the information we post on the social media channels listed on our investor relations website.

Our free cash flow measure included in the section entitled “Key Business Metrics—Free Cash Flow,” is not in accordance with U.S. Generally Accepted Accounting Principles (“GAAP”). This non-GAAP financial measure is not intended to be considered in isolation or as a substitute for, or superior to, financial information prepared and presented in accordance with GAAP. This measure may be different from non-GAAP financial measures used by other companies, limiting its usefulness for comparison purposes. We encourage investors to carefully consider our results under GAAP, as well as our supplemental non-GAAP results, to more fully understand our business.

Overview

ServiceNow was founded on a simple premise: to make work flow better. Our purpose is to make the world work better for everyone. Our intelligent platform, the Now Platform, is a cloud-based solution with embedded artificial intelligence and machine learning capabilities that helps global enterprises across industries, universities and governments unify and digitize their workflows. The Now Platform automates workflows across an entire enterprise by connecting disparate departments, systems and silos in a seamless way to unlock productivity and improve experiences for both employees and customers. Our workflow applications built on the Now Platform are organized along four primary areas: Technology, Customer and Industry, Employee and Creator. The transformation to digital operations, enabled by the Now Platform, increases our customers’ resiliency and security and delivers great experiences and additional value to their C-suite, employees and consumers.

We are closely monitoring the Russian invasion of Ukraine and the current armed conflict in Israel and the Gaza Strip. While these events are still evolving and the outcomes remain highly uncertain, we do not believe these conflicts will have a material impact on our business and results of operations. However, if the conflicts continue or worsen, leading to greater global economic disruptions and uncertainty, our business and results of operations could be materially impacted. Our customers in these regions represented an immaterial portion of our net assets as of June 30, 2024 and December 31, 2023, and of our total consolidated revenues for each of the three and six months ended June 30, 2024 and 2023.

Additionally, other macroeconomic events, including higher interest rates, global inflation and bank failures, have led to economic uncertainty in the global economy. To mitigate risk, our cash and cash equivalents are distributed across several large financial institutions and are not concentrated in one financial institution. We have not experienced any impact to our liquidity or to our current and projected business operations and financial condition due to recent macroeconomic events. Further, we have policy restrictions on the types of securities that can be purchased as part of our available-for-sale debt securities portfolio. These restrictions take industry and company concentration limits into consideration among other things. Furthermore, the majority of our non-marketable equity investments do not have material relationships with any one financial institution, and therefore, we believe that our exposure to loss as a result of bank failure is immaterial. We will continue to monitor the direct and indirect impact of macroeconomic events on our business and financial results.

See the “Risk Factors” section in Part I, Item 1A of our Annual Report on Form 10-K filed with the SEC on January 25, 2024 for further discussion of the possible impact of conflicts and macroeconomic events on our business and financial results.

Key Business Metrics

Remaining performance obligations. Transaction price allocated to remaining performance obligations (“RPO”) represents contracted revenue that has not yet been recognized, which includes deferred revenue and non-cancellable amounts that will be invoiced and recognized as revenue in future periods. RPO excludes contracts that are billed in arrears, such as certain time and materials contracts, as we apply the “right to invoice” practical expedient under relevant accounting guidance. Current remaining performance obligations (“cRPO”) represents RPO that will be recognized as revenue in the next 12 months.

As of June 30, 2024, our RPO was $18.6 billion, of which 47% represented cRPO. RPO and cRPO increased by 31% and 22%, respectively, compared to June 30, 2023. Factors that may cause our RPO to vary from period to period include the following:

• Foreign currency exchange rates. While a majority of our contracts have historically been in U.S. Dollars, an increasing percentage of our contracts in recent periods has been in foreign currencies, particularly the Euro and British Pound Sterling. Fluctuations in foreign currency exchange rates as of the balance sheet date will cause variability in our RPO.

• Mix of offerings. In a minority of cases, we allow our customers to host our software by themselves or through a third-party service provider. In self-hosted offerings, we recognize a portion of the revenue upfront upon the delivery of the software and as a result, such revenue is excluded from RPO.

• Subscription start date. From time to time, we enter into contracts with a subscription start date in the future and these amounts are included in RPO if such contracts are signed by the balance sheet date.

• Timing of contract renewals. While customers typically renew their contracts

Showing the first 8K of 60K characters. Open the full section

Except for the cash flow hedging program initiated during the three months ended March 31, 2024 discussed below, there have been no other changes to our quantitative and qualitative disclosures set forth in Part II, Item 7A in our Annual Report on Form 10-K for the year ended December 31, 2023, which was filed with the SEC on January 25, 2024.

Foreign Currency Exchange Risk

To mitigate our risks associated with fluctuations in foreign currency exchange rates, we enter into foreign currency forward contracts to hedge a portion of our net outstanding monetary assets, liabilities and forecasted foreign currency denominated revenues. These foreign currency forward contracts are intended to offset gains or losses related to remeasuring monetary assets and liabilities and to reduce foreign exchange impact on our forecasted revenues. Derivative contracts related to hedging of forecasted revenues are designated as cash flow hedges for accounting purposes. For contracts qualifying as cash flow hedges, the derivative’s gain or loss is initially reported as a component of accumulated other comprehensive income (loss) and subsequently reclassified into earnings in the same period the forecasted transaction affects earnings. For contracts not designated as cash flow hedges for accounting purposes, the derivative’s gain or loss is recognized immediately in earnings within our condensed consolidated statements of comprehensive income.

These foreign currency forward contracts expose us to credit risk to the extent that the counterparties may be unable to meet the terms of the agreement. We mitigate this credit risk by transacting with major financial institutions with high credit ratings. While the contract or notional amount is often used to express the volume of foreign currency forward contracts, the amounts potentially subject to credit risk are generally limited to the amounts, if any, by which the counterparties’ obligations under the agreements exceed our obligations to the counterparties. We are not required to pledge, and are not entitled to receive, cash collateral related to these derivative instruments. We do not enter into foreign currency forward contracts for trading or speculative purposes. Refer to Note 8 in the notes to our condensed consolidated financial statements included in this Quarterly Report on Form 10-Q for additional information.

Evaluation of Disclosure Controls and Procedures

Regulations under the Exchange Act require public companies, including our Company, to maintain “disclosure controls and procedures,” which are defined in Rule 13a-15(e) and Rule 15d-15(e) to mean a company’s controls and other procedures that are designed to ensure that information required to be disclosed in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed in our reports filed or submitted under the Exchange Act is accumulated and communicated to management, including our principal executive officer and principal financial officer, or persons performing similar functions, as appropriate, to allow timely decisions regarding required or necessary disclosures. In designing and evaluating our disclosure controls and procedures, management recognizes that disclosure controls and procedures, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the disclosure controls and procedures are met. Additionally, in designing disclosure controls and procedures, our management necessarily was required to apply its judgment in evaluating the cost-benefit relationship of possible disclosure controls and procedures. Our Chief Executive Officer and Chief Financial Officer have concluded, based on the evaluation of the effectiveness of the disclosure controls and procedures by our management as of June 30, 2024, that our disclosure controls and procedures were effective at the reasonable assurance level for this purpose.

Changes in Internal Control over Financial Reporting

There were no changes to our internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) that occurred during the quarter ended June 30, 2024 that have materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

PART II

ITEM 1. LEGAL PROCEEDINGS

We are party to certain litigation and other legal proceedings. While legal proceedings are inherently unpredictable and subject to uncertainties, we do not believe that the ultimate resolution of any such proceedings, whether taken individually or in the aggregate, is likely to have a material adverse effect on our business, financial position, results of operations or cash flows.

For additional information regarding legal proceedings, see Note 16 in the notes to our condensed consolidated financial statements in this Quarterly Report on Form 10-Q.

Investing in our securities involves risks. In addition to the risk factor below and information set forth in this Form 10-Q, you should carefully consider the risks and uncertainties described under the section “Risk Factors” in Part I, Item 1A of our Annual Report on Form 10-K for the year ended December 31, 2023, which could materially and adversely affect our business, financial condition or results of operations. Our business could be harmed by any of these risks or additional risks and uncertainties not presently known to us or that we currently believe to be immaterial. Our stock price could decline due to any of these risks.

Actual or perceived cybersecurity events experienced by us or our third-party service providers may create the perception that our platform is not secure, and we may lose customers or incur significant liabilities, which would harm our business, financial condition and operating results.

In the ordinary course of our business, we store, transmit, generate, and process our and our customers’ confidential, proprietary and sensitive data. As our business expands across the globe, the number of employees, contractors, vendors and other third parties remotely accessing our systems continues to grow. Our growing business operations increase our exposure to cyberattacks by a range of actors, who have used and will continue to use assorted tactics, techniques, and procedures, including malicious code, ransomware, social engineering, business email compromises, supply chain attacks, denial of service attacks and similar internet-enabled, fraudulent activity, and the frequency of those attacks have become more common. Further, during times of war and other major conflicts, we and our third-party providers may be vulnerable to a heightened risk of geopolitically motivated attacks, including cyberattacks, that could materially disrupt our systems and operations, supply chain and ability to provide our services.

The cybersecurity threats are not limited to actors operating in the systems we control directly. Our increasing reliance on third-party providers and public cloud infrastructure introduces new cybersecurity risks to our business operations. We rely on third-party service providers and technologies to operate business systems in a variety of contexts, and supply chain attacks have increased in frequency and severity. We cannot guarantee that our third-party service providers or our supply chain infrastructure have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our platform, systems and network or the systems and networks of third parties that support us and our business. Our ability to monitor the data security measures of our third-party providers is limited, and we necessarily depend in part on our providers to have in place and maintain adequate security measures to protect against unauthorized access, cyberattacks and the mishandling of data. Further, employee error or malfeasance in configuring, maintaining and using these services could impact our ability to monitor and secure them effectively.

We have identified vulnerabilities in our products and services in the past and expect to continue to do so in the future. We cannot be certain that we will be able to identify all vulnerabilities or address the vulnerabilities of which we become aware. There have been delays and may continue to be delays in developing patches that can be effectively deployed to address vulnerabilities. Further, security researchers and other individuals, have, in the past, actively searched for, published and/or exploited actual and potential vulnerabilities in our products or services and will likely continue to do so in the future. Also, certain persons, including researchers, have in the past not abided by, and may in the future not abide by, our responsible disclosure program, which has and could in the future result in the compromise of our systems or our or our customers’ data. Moreover, the incorporation of third-party or open-source software code into our or our customers’ systems increases the risk of exploitation of vulnerabilities, such as the vulnerability in the Java logging library known as “log4j” that affected our industry. We also have inherited and may in the future inherit additional security risks from acquiring or partnering with other companies.

In most instances, our customers are responsible for administering access to the data held in their particular instance for their employees and service providers. While our software is delivered with certain preset configurations, we understand that our customers require flexibility to configure the Now Platform to their specific business needs. We work closely with our customers to help them evaluate their security configurations, including providing guidance to align configuration settings with their business needs. Yet, in configuring our platform, both our employees and customers have made errors in the past and may do so again in the future. We are aware that, on occasion, our customers and ServiceNow have configured certain settings on our platform, or retained preset configurations, in a manner not aligned with their preferred security levels, which can result in, and has resulted in, information being made more widely accessible than intended. Such misconfigurations can be, and have been, identified publicly, increasing the risk of data being exposed unintentionally.

Our data security system and data governance framework designed to protect our and our customers’ information and prevent data loss may not be effective at preventing material breaches caused by intentional or unintentional actions or inactions by employees, contractors or third parties. Techniques used to sabotage or to obtain unauthorized access to systems are constantly evolving and may go undetected until a successful attack occurs. Moreover, we have experienced security incidents, which may reoccur in the future, that resulted in unauthorized access to, loss, or inadvertent disclosure of confidential, proprietary and sensitive information. We have observed attempts by third parties to induce or deceive our employees, contractors or users to fraudulently obtain access to our or our customers’ data or assets. In addition, our employees have fallen victim to phishing attacks in the past and may again in the future. Further, despite our security measures, employees, contractors and other individuals have gained, and in the future may gain, access to our systems under false pretenses to search for and exploit actual or potential vulnerabilities in our products or services or inflict other harms, such as deploying malware or stealing data.

An actual or perceived security breach or compromise can have a material effect on ServiceNow’s operations, finances and reputation. The adverse consequences can include accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to data; disruptions to our services; diversion of funds; litigation; indemnification and other contractual obligations; regulatory investigations; government fines and penalties; reputational damage; negative publicity; business and operational interruptions; loss of sales, customers, and partners; mitigation and remediation expenses; and other material costs and liabilities. In addition, the assessment and response to security incidents, as well as implementation of appropriate safeguards to protect against future incidents, can lead to material economic and operational consequences. These consequences can result regardless of whether the incident is suffered by us, affects our third-party service providers or stems from customers’ action or inaction. Moreover, even if a breach is unrelated to our security programs or practices, it could still cause us reputational harm and require us to undertake significant efforts to assess and respond to the breach, including further protecting our customers from their own vulnerabilities. There can be no assurance that any limitations of liability provisions in our subscription agreements, terms of use or other agreements would be enforceable or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim. In addition, while we maintain insurance coverage, we cannot be certain that such coverage will continue to be available on acceptable terms or in sufficient amounts to cover potential losses from a security incident or that an insurer will not deny coverage as to any future claim.

ITEM 2. UNREGISTERED SALES OF EQUITY SECURITIES AND USE OF PROCEEDS

On May 16, 2023, the Board of Directors authorized a program to repurchase up to $1.5 billion of the Company’s common stock, of which $787 million remained available for repurchase as of June 30, 2024. There were no share repurchases under our share repurchase program during the three months ended June 30, 2024.

Rule 10b5-1 Trading Plans

During the quarter ended June 30, 2024, no director or Section 16 officer of the Company adopted or terminated a “Rule 10b5-1 trading arrangement” or any “non-Rule 10b5-1 trading arrangement,” as each term is defined in Item 408 of Regulation S-K.

EXHIBIT INDEX

** The certifications on Exhibit 32 hereto are deemed not “filed” for purposes of Section 18 of the Exchange Act, or otherwise subject to the liability of that Section. Such certifications will not be deemed incorporated by reference into any filing under the Securities Act of 1933, as amended, or the Exchange Act.

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the Registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.