Risk Sleuth
OKTA · 10-K filed 5 Mar 2026 · year to 31 Jan 2026

Okta

20 named things its latest annual report says its results depend on, each in the company's own words. 14 of them are also named by other companies we've read.

Customers

Large customers (ACV > $100,000)

earns from · 5,100 customers with an annual contract value greater than $100,000
As of January 31, 2026, we had more than 20,000 customers, including 5,100 customers with an annual contract value greater than $100,000.Business (Item 1)

Also named by IOT, SNPS

Public sector entities

earns fromnamed as a risk
A portion of our revenues are generated by sales to public sector entities, which are subject to a number of challenges and risks.Risk factors (Item 1A)

Suppliers

Amazon Web Services (AWS)

depends onnamed as a risk
For example, we host our platforms using AWS data centers and other third-party cloud infrastructure services.Risk factors (Item 1A)

Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more

Partners and platforms

Okta Integration Network

depends on · over 7,000 integrations
As of January 31, 2026, we had over 7,000 integrations with these cloud, mobile and web applications, and IT infrastructure and security vendors.Business (Item 1)

Channel partners

depends onnamed as a risk
To grow our business, we expect to continue to depend on relationships with third parties, such as channel partners.Risk factors (Item 1A)

Also named by CRWD, DELL, GTLB, KEYS, P, QLYS, TEAM, VRNS

Third-party application stores

depends onnamed as a risk
If we fail to comply with these requirements, we could lose access to, or be required to remove our mobile applications from, third-party application stores.Risk factors (Item 1A)

Other companies

2026 Convertible Senior Notes

$350 millionnamed as a risk
As of January 31, 2026, the outstanding principal balance of the 2026 Notes of $350 million is classified as a current liability due to their upcoming maturity on June 15, 2026.Market risk (Item 7A)

Also named by ABNB, CYRX

Competitors

Microsoft

competes withnamed as a risk
Our principal competitor is Microsoft.Risk factors (Item 1A)

Also named by AAOI, AAON, AES, AJG, AMD, BLK, CDW, CEG and 13 more

Places

International (outside United States)

earns from · 21% and 20% of our total revenue in fiscal 2025 and fiscal 2026named as a risk
We currently have sales personnel outside the United States and maintain offices outside the United States in the Americas, Asia-Pacific and Europe, and our international revenue was 21% and 20% of our total revenue in fiscal 2025 and fiscal 2026, respectively.Risk factors (Item 1A)

Also named by DDOG, MDB, MSI, ROP, SNOW, TWLO

San Francisco, California

concentrated innamed as a risk
We have a large employee presence in San Francisco, California, and the west coast of the United States contains active earthquake and wildfire zones which have the potential to disrupt our business.Risk factors (Item 1A)

Also named by DOC

United Kingdom, Canada and Australia operating expenses

operates innamed as a risk
Our operating expenses are denominated in the currencies of the countries in which our operations are located, which are primarily in the United States, United Kingdom, Canada, and Australia.Market risk (Item 7A)

Hazards

Earthquakes and wildfires (U.S. West Coast)

operates innamed as a risk
We have a large employee presence in San Francisco, California, and the west coast of the United States contains active earthquake and wildfire zones which have the potential to disrupt our business.Risk factors (Item 1A)

Also named by AVAV, ENSG, FCNCA

Regulators

Federal Trade Commission

subject tonamed as a risk
In the United States, the Federal Trade Commission and state regulators enforce a variety of data privacy issues, such as promises made in privacy policies or failures to appropriately protect information about individuals, as unfair or deceptive acts or practices in or affecting commerce in violation of the Federal Trade Commission Act or similar state laws.Risk factors (Item 1A)

Also named by AMZN, AN, AVGO, BJ, CART, CELH, CHD, CHE and 56 more

Laws and programs

General Data Protection Regulation (GDPR)

subject tonamed as a risk
In Europe, the General Data Protection Regulation 2016/679 (the “GDPR”) imposes a strict data protection compliance regime in relation to the collection and processing of personal data, and various European and other foreign laws also restrict the use of cookies, tracking technologies and certain marketing activities.Risk factors (Item 1A)

Also named by A, AB, ABNB, ADBE, ADP, AGX, AIOT, AJG and 100 more

U.S. Foreign Corrupt Practices Act (FCPA)

subject tonamed as a risk
Noncompliance with the FCPA, other applicable anti-corruption laws or anti-money laundering laws could subject us to investigations, whistleblower complaints, sanctions, settlements, prosecution and other enforcement actions within the U.S. and internationally, which could have a material adverse effect on our reputation, business, results of operations and financial condition.Risk factors (Item 1A)

Also named by A, ADBE, ADP, AIR, AJG, ALB, AME, AMZN and 112 more

EU Artificial Intelligence Act

subject tonamed as a risk
For example, in the European Union, the EU Artificial Intelligence Act now establishes obligations on the use of AI based on the type of AI and its potential risks to society.Risk factors (Item 1A)

Also named by ABNB, ADP, AIOT, AKAM, ALAB, AMG, APP, AVAV and 24 more

HIPAA

subject tonamed as a risk
Certain Okta Platform offerings maintain minimum security requirements in alignment with the Security Rule of HIPAA.Risk factors (Item 1A)

Also named by AFL, BAX, BBSI, CI, DHR, DOC, DOCN, DOCU and 19 more

FedRAMP

subject tonamed as a risk
For example, some of our public sector customers contract with us on the basis of our authorization under FedRAMP, which requires us to undertake additional actions and expenses to ensure compliance.Risk factors (Item 1A)

Also named by ADSK, CRWD, DDOG, DOCU, FTNT, GTLB, MSTR, NET and 9 more

U.S. export controls on encryption

subject tonamed as a risk
Our business activities are subject to various restrictions under U.S. export controls and trade and economic sanctions laws, which include prohibitions on the sale or supply of certain products and services to U.S. embargoed or sanctioned countries, governments, persons and entities and also require authorization for the export of encryption items.Risk factors (Item 1A)

Department of Defense Impact Level 4

subject tonamed as a risk
Certain Okta Platform offerings maintain multiple agency FedRAMP Authorities to Operate and are compliant to operate at Department of Defense Impact Level 4.Risk factors (Item 1A)