Risk Sleuth
DOCN · 10-K filed 24 Feb 2026 · year to 31 Dec 2025

DigitalOcean Holdings

33 named things its latest annual report says its results depend on, each in the company's own words. 21 of them are also named by other companies we've read.

Customers

Digital Native Enterprise customers

concentrated in · 60% of our total revenue
As of December 31, 2025, we had approximately 21,000 DNE Customers, collectively, comprising 60% of our total revenue for the year ended December 31, 2025.Business (Item 1)

Suppliers

Third-party data center providers

depends onnamed as a risk
Our business is reliant on these data center facilities.Risk factors (Item 1A)

Also named by CRWV, ORCL

Limited number of equipment component suppliers

depends onnamed as a risk
We rely on a limited number of suppliers for several components of the equipment we use to operate our platform and provide products to our customers.Risk factors (Item 1A)

NVIDIA

depends on
In 2025, we released a range of new AI products and platform capabilities, including Gradient® AI GPUs from AMD and NVIDIA, and major enhancements to the Gradient® AI Platform such as VPC support, image and video models, and the Agent Development Kit (“ADK”).Business (Item 1)

Also named by AMD, ANET, BAM, CDNS, COHR, HPE, INTC, NOW and 3 more

Partners and platforms

Persistent Systems

earns from · multi-year, eight figure average per annum
We also announced a multi-year, eight figure average per annum strategic partnership with Persistent Systems, a global digital engineering and enterprise modernization leader, to make AI more affordable, scalable, and secure for digital native enterprises and developers worldwide.Business (Item 1)

Advanced Micro Devices (AMD)

depends on
In 2025, we released a range of new AI products and platform capabilities, including Gradient® AI GPUs from AMD and NVIDIA, and major enhancements to the Gradient® AI Platform such as VPC support, image and video models, and the Agent Development Kit (“ADK”).Business (Item 1)

Also named by FTNT, HPE, NVDA, SMCI

Laravel

earns from
In 2025, we entered into multiple strategic partnerships, including with Laravel, which is using DigitalOcean for its Laravel VPS offering, fal, a leading multimodal AI platform for generative media, and an expanded partnership with AMD, which launched a DigitalOcean-powered developer cloud in 2025.Business (Item 1)

MongoDB

depends on
We currently offer managed offerings for relational databases (SQL) such as PostgreSQL and MySQL, a NoSQL database such as DigitalOcean Managed MongoDB, a fully-managed database as a service offering in partnership with MongoDB, and a high-performance key-value caching service such as Managed Caching for Valkey.Business (Item 1)

Other companies

2030 Convertible Notes

$625.0 million aggregate principal amountnamed as a risk
In August 2025, we issued $625.0 million aggregate principal amount of the 2030 Convertible Notes in a private placement.Risk factors (Item 1A)

Competitors

Amazon Web Services (AWS)

competes withnamed as a risk
Our AI/ML offerings compete with providers of AI/ML infrastructure and services, including the same large, diversified technology companies, Amazon (AWS), Microsoft (Azure), and Google (GCP), and smaller more infrastructure-focused companies such as Coreweave and Lambda Labs.Risk factors (Item 1A)

Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more

Microsoft Azure

competes withnamed as a risk
Our AI/ML offerings compete with providers of AI/ML infrastructure and services, including the same large, diversified technology companies, Amazon (AWS), Microsoft (Azure), and Google (GCP), and smaller more infrastructure-focused companies such as Coreweave and Lambda Labs.Risk factors (Item 1A)

Also named by AIOT, AKAM, BLK, DDOG, DOCU, EXTR, FFIV, FTNT and 14 more

Google Cloud Platform (GCP)

competes withnamed as a risk
Our AI/ML offerings compete with providers of AI/ML infrastructure and services, including the same large, diversified technology companies, Amazon (AWS), Microsoft (Azure), and Google (GCP), and smaller more infrastructure-focused companies such as Coreweave and Lambda Labs.Risk factors (Item 1A)

Also named by CRWV, DDOG, EXTR, FFIV, INTU, MDB, MELI, OSCR and 5 more

Akamai (Linode)

competes withnamed as a risk
Examples in this category include OVHcloud, Akamai (Linode), Hetzner, Vultr, and Contabo.Risk factors (Item 1A)

Also named by FFIV

CoreWeave

competes withnamed as a risk
Our AI/ML offerings compete with providers of AI/ML infrastructure and services, including the same large, diversified technology companies, Amazon (AWS), Microsoft (Azure), and Google (GCP), and smaller more infrastructure-focused companies such as Coreweave and Lambda Labs.Risk factors (Item 1A)

WP Engine

competes withnamed as a risk
Finally, our Managed Hosting offering competes with digital agencies and other managed hosting providers, including Kinsta and WP Engine.Risk factors (Item 1A)

Places

China

subject tonamed as a risk
These as well as other restrictions that could be forthcoming may impact certain of our business activities, particularly as they relate directly or indirectly to China.Risk factors (Item 1A)

Also named by A, AA, AAOI, AAP, AAPL, AB, ADI, AEHR and 261 more

Taiwan

named as a risk
Geopolitical risks, including those arising from trade tension and/or the imposition and enforceability of trade tariffs or other changes in trade policies and related uncertainties (including U.S. tariffs imposed or threatened to be imposed, any retaliatory actions taken by other countries, and uncertainties regarding the ability to obtain refunds for previously paid tariffs that have subsequently been invalidated), terrorist activity or acts of civil or international hostility, and other geopolitical conflicts and developments, including tensions between China and Taiwan, are increasing.Risk factors (Item 1A)

Also named by AAOI, AAPL, AB, ADI, AEHR, ALAB, AMAT, AMD and 50 more

New York, San Francisco and Atlanta data centers

operates in
We lease data centers in the New York, San Francisco and Atlanta metropolitan areas, and plan to open new facilities in 2026 in Memphis, Richmond and Kansas City, in the United States.Business (Item 1)

Hazards

Earthquakes, floods and fires

named as a risk
All of our data center facilities and network infrastructure are vulnerable to damage or interruption from a variety of sources including earthquakes, floods, fires, power loss, system failures, computer vulnerabilities, physical or electronic break-ins, human error, malfeasance or interference, including by employees, former employees, or contractors, terrorism and other catastrophic events.Risk factors (Item 1A)

Commodities and inputs

GPUs

depends onnamed as a risk
competition with larger cloud computing companies and other consumers with respect to high demand equipment, such as GPUs;Risk factors (Item 1A)

Also named by SMCI, SNOW

Energy prices

exposed to its pricenamed as a risk
Finally, the costs of operating our data centers have increased and may increase in the future due to rising energy prices as a result of global geopolitical issues.Risk factors (Item 1A)

Regulators

Office of Foreign Assets Control (OFAC)

subject tonamed as a risk
Our business activities are subject to various export, import, sanctions, and foreign investment laws and regulations, including, without limitation, the United States Department of Commerce’s Export Administration Regulations and various economic and trade sanctions regulations administered by the United States Department of the Treasury’s Office of Foreign Assets Controls.Risk factors (Item 1A)

Also named by ABNB, ADP, AIG, APP, BMI, BMNR, BPOP, CAT and 46 more

Laws and programs

EU General Data Protection Regulation (GDPR)

subject to · fines of up to 20.0 million Eurosnamed as a risk
Compliance with the EU GDPR and, if and when effective, the proposed ePrivacy Regulation, may require us to incur substantial operational costs or modify our business practices.Risk factors (Item 1A)

Also named by ACN, ADSK, AIG, ALK, AMG, ANET, APG, AXON and 61 more

2025 Credit Facility Term Loan A (SOFR)

exposed to its price · $380.0 million outstanding
As of December 31, 2025, we had $380.0 million outstanding under the 2025 Credit Facility as Term Loan A.Market risk (Item 7A)

California Consumer Privacy Act (CCPA)

subject tonamed as a risk
The CCPA provides for fines and allows private litigants affected by certain data breaches to recover significant statutory damages.Risk factors (Item 1A)

Also named by AAP, AIOT, AKAM, ALL, APP, AYI, BAC, BBSI and 69 more

U.S. tariffs

exposed to its pricenamed as a risk
changes in trade policies and related uncertainties, including the imposition and enforceability of tariffs, trade controls and other trade barriers or retaliation for those measures by other governments, which may impact the pricing and availability of these components and future pricing expectations;Risk factors (Item 1A)

Also named by A, AAPL, ACHR, ADI, AEHR, AEP, AIOT, AKAM and 170 more

OECD Pillar Two

subject tonamed as a risk
Based on our current understanding of the minimum revenue thresholds, we currently expect to be outside the scope of the Pillar Two proposals but could fall within their scope in the future, which could increase our tax obligations and require us to incur additional material costs to ensure compliance with any such rules in the countries where we do business.Risk factors (Item 1A)

Also named by APO, BAM, BAX, BF/B, CHRW, COHR, CPNG, CRM and 45 more

U.S. Export Administration Regulations

subject tonamed as a risk
Most recently, new export controls have included strict licensing restrictions on exports of U.S. regulated semiconductor- and supercomputer-related products and technologies, as well as certain chips and chip-related products and technologies.Risk factors (Item 1A)

Also named by ADI, ALAB, AMD, APP, ARW, AVGO, CARR, CDRE and 40 more

EU AI Act

subject tonamed as a risk
Several jurisdictions around the world, including Europe, the U.S. federal government and certain U.S. states, have proposed, enacted or are considering laws governing the development and use of AI/ML, such as the EU’s AI Act.Risk factors (Item 1A)

Also named by ACN, ADBE, AMD, AXON, CGNX, CRM, CRWD, CTSH and 36 more

HIPAA

subject tonamed as a risk
For example, to support certain customers in the healthcare industry, we are required to comply with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and enter into business associate agreements (“BAAs”), which impose additional obligations and potential liabilities, including penalties and fines in the event we fail to comply with the terms of such agreements.Risk factors (Item 1A)

Also named by AFL, BAX, BBSI, CI, DHR, DOC, DOCU, DXCM and 19 more

EU-U.S. Data Privacy Framework

subject tonamed as a risk
As a result, there can be no assurance that we will be able to continue to rely on these mechanisms or otherwise lawfully transfer personal data to the United States or other jurisdictions.Risk factors (Item 1A)

Also named by ADBE, APP, CRM, CRWD, DDOG, GTLB, IDXX, INTU and 12 more

Section 230 of the Communications Decency Act

subject tonamed as a risk
Enactment of this legislation or an unfavorable outcome of the FCC rulemaking could limit our ability to rely on the protections of Section 230 of the CDA.Risk factors (Item 1A)

Also named by APP, EBAY, GOOG, META, PPLI, RBLX, RDDT, TWLO and 1 more

Digital Millennium Copyright Act (DMCA)

subject tonamed as a risk
Furthermore, recent litigation has created uncertainty with respect to the applicability of DMCA protections to companies that host substantial amounts of user content.Risk factors (Item 1A)

Also named by APP, ETSY, GDDY, GOOG, NET, PINS, RBLX