10-Q – 2026-06-05 – docu-20260430.htm

Our credit facility restricts our ability to, among other things:

▪ use our accounts receivable, inventory, trademarks and most of our other assets as security in other borrowings or transactions, unless the value of the assets subject thereto does not exceed a certain threshold;
▪ incur additional indebtedness;
▪ incur liens upon our property;
▪ dispose of certain assets;
▪ declare dividends or make certain distributions; and
▪ undergo a merger or consolidation or other transactions.

Our credit facility also requires that our Consolidated Leverage Ratio (as defined in the credit facility) not exceed specified levels, or that our Consolidated Interest Coverage Ratio (as defined in the credit facility) be less than specified levels. Our ability to comply with these and other covenants is dependent upon several factors, some of which are beyond our control.

Our failure to comply with the covenants or payment requirements, or the occurrence of other events specified in our credit facility, could result in an event of default under the credit facility, which would give our lenders the right to terminate their commitments to provide additional loans under the credit facility and to declare all borrowings outstanding, together with accrued and unpaid interest and fees, to be immediately due and payable. In addition, we have granted our lenders first-priority liens against all of our assets as collateral. Failure to comply with the covenants or other restrictions in the credit facility could result in a default. If the debt under our credit facility was to be accelerated, we may not have sufficient cash on hand or be able to sell sufficient collateral to repay it, which would have an immediate adverse effect on our business and operating results.

We may require additional capital to support business growth and objectives, and this capital might not be available to us on reasonable terms, if at all, and may result in stockholder dilution.

We fund our operations through payments by our customers for use of our product offerings and related services. Our capital resources also include a secured revolving credit facility of up to $750.0 million, which may be increased by an additional $250.0 million subject to the terms of the credit agreement.

Based upon our current operating plan, we believe that our existing cash, cash equivalents and investments are sufficient to fund our current operating expenses and capital expenditure requ irements based on historical forecasts. We have based this assessment on assumptions that may prove to be wrong, and it is possible that we could use our capital resources sooner than we currently expect. This estimate does not reflect the possibility that we may not be able to access a material portion of our existing cash, cash equivalents and investments due to market conditions. For example, if banks or financial institutions wind down and liquidate, enter receivership or become insolvent in the future in response to financial conditions affecting the banking system and financial markets, our ability to access our existing cash, cash equivalents and investments may be threatened and could have a material adverse effect on our business and financial condition.

We also intend to continue to make investments to support our business and, in the future, we may require additional funds. Additional financing may not be available on favorable terms, if at all. In addition, in the event that we incur
Docusign, Inc. | 2027 Form 10-Q | 49

additional debt, including under the credit facility, the debt holders would have rights senior to holders of common stock to make claims on our assets. Additionally, the credit facility restricts our ability to pay dividends on common stock and the terms of any future debt could restrict our operations. Further, if we issue additional equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock. If adequate funds are not available on acceptable terms when we require it, we may be unable to invest in future growth opportunities, which could harm our business, operating results and financial condition.

Our ability to use our net operating loss carryforwards to offset future taxable income may be subject to certain limitations.

As of April 30, 2026, we had accumulated net operating loss carryforwards and research tax credits in our federal, state and foreign jurisdictions with varying expiration dates.

Under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended, our ability to utilize net operating loss carryforwards or other tax attributes, such as research tax credits, in any taxable year may be limited if we experience an “ownership change.” An “ownership change” generally occurs if one or more stockholders or groups of stockholders who own at least 5% of our stock increase their ownership by more than 50 percentage points over their lowest ownership percentage within a rolling three-year period. Similar rules may apply under state and foreign tax laws. Future issuances of our stock could cause an “ownership change.” It is possible that any future ownership change could have a material effect on the use of our net operating loss carryforwards or other tax attributes, which could adversely affect our profitability.

If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our operating results could be adversely affected.

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in our consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” Our operating results may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our operating results to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our common stock.

We are exposed to fluctuations in currency exchange rates, which could negatively affect our operating results.

Our sales contracts are primarily denominated in U.S. dollars, and therefore a substantial portion of our revenue is not subject to foreign currency risk. However, a strengthening of the U.S. dollar could increase the real cost of our offerings to our customers outside of the U.S., which could adversely affect our operating results. In addition, an increasing portion of our operating revenues and operating expenses is earned or incurred outside of the U.S., and an increasing portion of our assets is held outside of the U.S. These operating revenues, expenses and assets are denominated in foreign currencies and are subject to fluctuations due to changes in foreign currency exchange rates. If we are not able to successfully manage, or to implement strategies to manage, against the risks associated with currency fluctuations, our operating results could be adversely affected.

Additionally, global events as well as geopolitical developments, including regional conflicts in Europe and the Middle East, fluctuating commodity prices, trade tariff developments and inflation have caused, and may in the future cause, global economic uncertainty and uncertainty about the interest rate environment, which could amplify the volatility of currency fluctuations. We have not engaged in the hedging of foreign currency transactions to date, so we may not be able to effectively offset the adverse financial impacts that may result from unfavorable movements in foreign currency exchange rates, which could adversely affect our operating results.

We could be required to collect additional sales taxes or other indirect taxes or be subject to other tax liabilities that may increase the costs our clients would have to pay for our offering and adversely affect our operating results.

A successful assertion by one or more states or foreign jurisdictions requiring us to collect taxes where we presently do not do so, or to collect more taxes in a jurisdiction in which we currently do collect some taxes, could result in substantial tax liabilities, including taxes on past sales, as well as penalties and interest. Any imposition by state or local governments or other jurisdictions of sales tax or other indirect tax collection obligations on out-of-jurisdiction sellers could also create additional administrative burdens for us, put us at a competitive disadvantage if they do not impose similar obligations on our competitors and decrease our future sales, which could have a material adverse impact on our business and operating results.
Docusign, Inc. | 2027 Form 10-Q | 50

Legal and Regulatory Risks

We are subject to laws and regulations affecting our business, including those related to e-signature, marketing, advertising, privacy, data protection and information security. Our actual or perceived failure to comply with laws or regulations could harm our business.

The U.S. federal government and various state and foreign governments have adopted or proposed limitations on the collection, distribution, use and storage of data relating to individuals and businesses, including the use of contact information and other data for marketing, advertising and other communications with individuals and businesses. In the U.S., various laws, and regulations and agency rules and opinions apply to the collection, processing, disclosure and security of certain types of data, including:

▪ The ESIGN Act in the U.S. and similar U.S. state laws, particularly the Uniform Electronic Transactions Act (the “UETA”), which authorize the creation of legally binding and enforceable agreements utilizing electronic signatures and records. We are particularly reliant on the UETA and the ESIGN Act, which together have solidified the legal landscape in the U.S. for use of electronic signatures and records by providing that electronic signatures and records carry the same weight and have the same legal effect as paper documents and wet ink signatures.

▪ The EU’s eIDAS, and ongoing regulatory and standards developments, including eIDAS 2.0 amendments, which may impose additional requirements on trust services and qualified providers in the EU.

▪ The Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the Gramm Leach Bliley Act, and state laws relating to privacy and data security. Amendments to state cybersecurity regulations, such as updates to financial services cybersecurity requirements in New York State and elsewhere may further increase our compliance burdens.

▪ Additionally, the FTC and many U.S. state attorney generals are interpreting federal and state consumer protection laws as imposing standards for the online collection, use, dissemination, and security of personal information. For example, California has enacted the California Consumer Privacy Act (as amended, the “CCPA”), that subjects businesses to new regulations promulgated through a recently created enforcement agency called the California Privacy Protection Agency. Over a third of other U.S. states have passed comparable legislation, and several additional U.S. states may pass similar legislation with potentially greater penalties, and more rigorous compliance requirements relevant to our business.

▪ The Health Insurance Portability and Accountability Act (“HIPAA”) in the U.S. (as amended and supplemented by the Health Information Technology for Economic and Clinical Health Act of 2009 (“HITECH”)), and even more stringent state health information privacy laws, impose mandatory contractual terms and other obligations with respect to safeguarding the privacy, security and transmission of protected health information and de-identified health information. We may function as a HIPAA business associate for certain of our customers and, as such, are subject to applicable privacy and data security requirements. Failure to comply with applicable HIPAA requirements can result in significant civil monetary penalties and, in certain circumstances, criminal penalties and fines.

Additionally, we are subject to various other laws and regulations affecting our business. For example, the SEC has adopted cybersecurity risk management and disclosure rules, which require mandatory disclosure of information pertaining to cybersecurity incidents and cybersecurity risk management, strategy and governance. In March 2024, the SEC also adopted (but subsequently stayed the implementation of) amendments that would require public companies to disclose certain climate-related information in our annual reports beginning with our annual report covering fiscal year ended January 31, 2026. Additionally, California recently adopted the Climate Corporate Data Accountability Act and the Climate-Related Financial Risk Act, each of which mandate certain climate-related public disclosure requirements (although there are proposals to stay such requirements until 2028).

We expect that new laws, regulations and industry standards will evolve, and new laws, including novel forms of digital regulation, will continue to be proposed and enacted relating to privacy, data protection, marketing, advertising, electronic signatures, consumer communications and information security in the U.S., the EU and other jurisdictions, and we cannot determine the impact this may have on our business. Future laws, regulations, standards and other obligations or any changed interpretation of existing laws or regulations could impair our ability to develop and market new functionality and maintain and grow our customer base and increase revenue. For example, changes in the regulatory landscape relating to new and evolving technologies, such as advances in AI technologies, and future restrictions on the collection, use, sharing or disclosure of data, or additional requirements for the express or implied consent of our customers, partners or end consumers for the use and disclosure of such information could require us to incur additional costs or modify our products and solutions, possibly in a material manner, and could limit our ability to
Docusign, Inc. | 2027 Form 10-Q | 51

develop new functionality. Any actual or perceived failure to comply with these or other laws or regulations could harm our business, and result in legal liability, regulatory action, or brand and reputational harm.

Complying with laws and regulations related to privacy and data protection could result in additional costs and liabilities to us or inhibit sales of our software.

A wide variety of state, national, and international laws, regulations, and industry standards apply to the collection, use, retention, protection, disclosure, transfer and other processing of personal data and other information, the scope of which are consistently changing, subject to differing interpretations, and may be inconsistent across countries or conflict with other rules. Data protection and privacy-related laws and regulations are evolving and may result in increasing regulatory and public scrutiny and escalating levels of enforcement and sanctions. Complying with these various laws and regulations could cause us to incur substantial costs or require us to change our business practices, systems, and compliance procedures in a manner adverse to our business. For more information on these laws and their impact on our business, see the risk factor “We are subject to laws and regulations affecting our business, including those related to e-signature, marketing, advertising, privacy, data protection and information security. Our actual or perceived failure to comply with laws or regulations could harm our business.”

Internationally, virtually every jurisdiction in which we operate has established its own privacy and data security legal framework, which may include compliance requirements for us, our customers and partners. For example, in Europe, the General Data Protection Regulation (the “EU GDPR”) contains robust obligations on data controllers and processors and fulsome documentation requirements for corporate data protection compliance programs. Our obligations under the EU GDPR and other similar regional European data privacy and protection regulations (collectively the “GDPR”) include stringent data protection and cybersecurity requirements, making it more costly to provide our services in a compliant manner and increasing our risk in the event of non-compliance. We are also certified under the Asia-Pacific Economic Cooperation Cross-Border Privacy Rules System and the APEC Privacy Recognition for Processors System. A breach of these or other data protection regulations could result in regulatory investigations, reputational damage, fines and sanctions, orders to cease or change our processing of data, enforcement notices, or assessment notices (for a compulsory audit). Such penalties, which under GDPR may include fines up to the greater of €20 million (£17.5 million) or 4% of global turnover, are in addition to any civil litigation claims by customers and data subjects. We may also face civil claims including representative actions and other class action-type litigation (where individuals have suffered harm), potentially amounting to significant compensation or damages liabilities, as well as associated costs, diversion of internal resources, and reputational harm.

Additionally, the GDPR imposes strict rules on the transfer of personal data out of the EU or the UK to any country whose laws have not been deemed by regulators in the EU or UK to ensure an “adequate” level of data protection safeguards (such as the U.S.), and requires appropriate transfer mechanisms and, in some cases, transfer impact assessments and supplementary measures. These obligations may evolve, be interpreted or applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other requirements or our practices.

Legal developments in Europe, including the EU Data Act, continue to evolve, creating complexity and uncertainty regarding transfers of personal data from the EU and the UK to the U.S. We currently utilize a combination of Binding Corporate Rules and Standard Contractual Clauses as the approved data transfer mechanisms by the EU Commission for corresponding applicable data transfer activity. While we do not anticipate any immediate changes in our current operations, we will continue to monitor these legal developments. As supervisory authorities continue to issue further guidance on the cross-border transfers of personal data, we could incur greater costs and be required to modify the manner or location in which we operate.

We have been and may in the future be subject to legal proceedings and litigation for a variety of claims, including labor and employment issues, intellectual property disputes, securities law violations, derivative litigation and other matters, which may be costly and may subject us to significant liability and increased costs of doing business. Our business may suffer if it is alleged or determined that our technology infringes the intellectual property rights of others or if the cost and time-commitment of litigation diverts resources from our other business activities.

From time to time, we have been and may in the future be involved as a party or an indemnitor in legal proceedings, disputes or regulatory inquiries that arise in the ordinary course of business. These may include alleged claims, lawsuits and proceedings regarding labor and employment issues, commercial disagreements, securities law violations and other matters. In particular, companies in the software industry are often required to defend against litigation claims based on allegations of infringement or other violations of intellectual property rights. We have from time to time been subject to intellectual property claims and disputes and may be subject to such claims in the future. In addition, many of these companies have the capability to dedicate substantially greater resources to enforce their alleged intellectual property rights and to defend claims that may be brought against them. Any litigation may also involve patent holding companies or other adverse patent owners that have no relevant product revenue and against which our patents may therefore provide little or no deterrence. If a third party is able to obtain an injunction preventing us from utilizing such third-party intellectual property rights, or if we cannot license or develop technology for any infringing aspect of our
Docusign, Inc. | 2027 Form 10-Q | 52

business, we would be forced to limit or stop sales of our software or cease business activities employed by such intellectual property and may be unable to compete effectively. Any inability to license third-party technology in the future would have an adverse effect on our business or operating results and would adversely affect our ability to compete.

Such disputes may require us to redesign our products, delay releases, enter into costly settlement or license agreements, pay costly damage awards, or face a temporary or permanent injunction prohibiting us from marketing or selling our products and solutions. Requiring us to change one or more aspects of the way we deliver our products and solutions may harm our business. We may also be contractually obligated to indemnify our customers in the event of infringement of a third party’s intellectual property rights. Responding to such claims, including those currently pending, regardless of their merit, can be time consuming and costly to defend in litigation and damage our reputation and brand.

For more information on our pending legal proceedings, see Part II Item 1. Legal Proceedings of this Quarterly Report on Form 10-Q.

Regardless of the merits or ultimate outcome of any claims that have been or may be brought against us or that we may bring against others, lawsuits are time-consuming and expensive to resolve, divert management’s time and attention, and could harm our reputation. Although we carry general liability and other forms of insurance, our insurance may not cover potential claims that arise or may not be adequate to indemnify us for all liability that may be imposed. We may also determine that the most cost-effective way to resolve a dispute is to enter into a settlement agreement. Litigation is inherently unpredictable and we cannot predict the timing, nature, controversy or outcome of lawsuits or assure you that the results of any of these actions will not have an adverse effect on our business, operating results or financial condition.

We could incur substantial costs in protecting or defending our proprietary rights, and any failure to adequately protect our rights could impair our competitive position and we may lose valuable assets, experience reduced revenue and incur costly litigation to protect our rights.

Our success is dependent, in part, upon protecting our proprietary technology. We rely on a combination of patents, copyrights, trademarks, service marks, trade secret laws and contractual provisions in an effort to establish and protect our proprietary rights. However, the steps we take to protect our intellectual property may be inadequate. While we have been issued patents in the U.S. and other countries and have additional patent applications pending, we may be unable to obtain patent protection for the technology covered in our patent applications and such patents may no longer provide us with competitive advantages. In addition, any patents issued in the future may not provide us with competitive advantages or may be successfully challenged by third parties. Any of our patents, trademarks or other intellectual property rights may be challenged or circumvented by others or invalidated through administrative process or litigation. There can be no guarantee that others will not independently develop similar products, duplicate any of our products or design around our patents. Despite our precautions, it may be possible for unauthorized third parties to copy our products or aspects of our platform and use information that we regard as proprietary to create products and solutions that compete with ours. Some license provisions protecting against unauthorized use, copying, transfer and disclosure of our products may be unenforceable under the laws of jurisdictions outside the U.S. Additionally, we are unable to predict or assure that rights previously granted by third parties to intellectual property licensed or assigned to us will not hamper our ability to assert our intellectual property rights or hinder the settlement of currently pending or future disputes; or that any of our pending or future copyright or trademark applications will be issued or have the coverage originally sought. To the extent we expand our international activities, our exposure to unauthorized copying and use of our products and proprietary information may increase.

We enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have strategic relationships and business alliances. No assurance can be given that these agreements will be effective in controlling access to and distribution of our products and proprietary information or prevent infringement, violation, or misappropriation of our intellectual property. Further, these agreements do not prevent our competitors or partners from independently developing technologies that are substantially equivalent or superior to our products and solutions.

In order to protect our intellectual property rights, we may be required to spend significant resources to monitor and protect and enforce these rights, including through litigation. Litigation brought to protect and enforce our intellectual property rights could be costly, time consuming and distracting to management and could result in the impairment or loss of portions of our intellectual property. Furthermore, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation or diversion of our management’s attention and resources, could delay further sales or the implementation of our products and solutions, impair the functionality of our products and solutions, delay introductions of new solutions,
Docusign, Inc. | 2027 Form 10-Q | 53

result in our substituting inferior or more costly technologies into our products and solutions or injure our reputation. Moreover, there could be public announcements of the results of hearings, motions or other interim proceedings or
developments, and if securities analysts or investors perceive these results to be negative, it could have a substantial
adverse effect on the price of our common stock. Furthermore, legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain and any changes in, or unexpected interpretations of, intellectual property laws may compromise our ability to enforce our intellectual property rights. Any of our intellectual property rights may be successfully challenged, opposed, diluted, misappropriated or circumvented by others or invalidated, narrowed in scope or held unenforceable through administrative process or litigation. Any of these results could adversely affect our business, operating results and financial condition.

We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Intellectual property protection may not be available to us in every country in which our products and services are available, or may be limited in some countries. Moreover, policing unauthorized use of our technologies, trade secrets and intellectual property may be difficult, expensive and time-consuming, particularly in foreign countries where the laws may not be as protective of intellectual property rights as those in the U.S. and where mechanisms for enforcement of intellectual property rights may be less effective. For example, some foreign countries have compulsory licensing laws under which a patent owner must grant licenses to third parties. In addition, many countries limit the enforceability of patents against certain third parties, including government agencies or government contractors. In these countries, patents may provide limited or no benefit. If we fail to adequately protect our intellectual property and proprietary rights, our business, operating results and financial condition could be adversely affected.

Many of our customers deploy our products and solutions globally, and our products and solutions must comply with certain legal and regulatory requirements in varying countries. If our products and solutions fail to meet these requirements, we could incur significant liabilities and our financial condition may suffer.

Many customers use our products and solutions globally to comply with safe harbors and other legislation in the countries in which they transact business. For example, some of our customers rely on government authorizations we maintain, such as FedRAMP in the U.S, or certifications such as our qualification as a Trust Service Provider under eIDAS in the EU to help satisfy their own legal and regulatory compliance requirements. If a court or regulatory body determines that our products and solutions are inadequate to meet these requirements, documents executed through our products and solutions could, in some instances, be rendered unenforceable, resulting in potential loss of customers, liability under customer contracts, and brand and reputational damage. Additionally, changes to qualified electronic signature standards and emerging AI and digital identity governance frameworks could necessitate product modifications or recertifications, and any delay or failure to obtain or maintain such authorizations could adversely affect our ability to serve certain customers and markets.

We use open source software in our products, which could subject us to litigation or other actions.

We use open source software in our products and solutions. Any use of open source software may expose us to greater risks than the use of commercial software because open source licensors generally do not provide warranties or controls on the functionality or origin of the software. Any use of open source software may involve security risks, making it easier for hackers and other third parties to determine how to compromise our platform. On occasion, companies that use open source software have faced claims challenging their use of open source software or compliance with open source license terms. There is evolving legal precedent for interpreting the terms of certain open source licenses, including the determination of which works are subject to the terms of such licenses. As a result, we could be subject to lawsuits by parties claiming ownership of what we believe to be open source software. Litigation could be costly for us to defend, have a negative effect on our operating results and financial condition or require us to devote additional research and development resources to change our products. In addition, if we were to combine our proprietary software products with open source software in a certain manner, we could, under certain of the open source licenses, be required to release the source code of our proprietary software products. This would allow our competitors to create similar offerings with lower development effort and time and ultimately could result in a loss of sales for us. If we inappropriately use or incorporate open source software subject to certain types of open source licenses that challenge the proprietary nature of our software products, we may be required to re-engineer our products, discontinue the sale of our products and solutions or take other remedial actions that may divert resources away from or delay our development efforts.

Indemnity provisions in various agreements potentially expose us to substantial liability for intellectual property infringement, data protection and other losses.

Docusign, Inc. | 2027 Form 10-Q | 54

Our agreements with some customers and other third parties include indemnification provisions under which we agree to indemnify them for losses suffered or incurred as a result of claims of intellectual property infringement, data protection, violations, data breaches or cyberattacks, damages caused by us to property or persons, or other liabilities relating to or arising from our offerings, solutions or other contractual obligations. Some of these indemnity provisions provide for uncapped liability for which we would be responsible, and some indemnity provisions survive termination or expiration of the applicable agreement. Large indemnity payments could harm our business, operating results and financial condition. Although we normally contractually limit our liability with respect to such obligations, such limitations may not be enforceable in all jurisdictions, and we may still incur substantial liability related to them and we may be required to cease use of certain functions of our products and solutions as a result of any such claims. In addition, our customer agreements generally include a warranty that the proper use of Docusign by a customer in accordance with the agreement and applicable law will be sufficient to meet the definition of an “electronic signature” as defined in the Electronic Signatures in Global and National Commerce Act (“ESIGN Act”) and eIDAS. Any warranty or indemnification claim brought by our customers could result in damage to our reputation and harm our business and operating results.

Changes in tax laws, rulings and interpretations may subject us to potential adverse tax consequences, which could negatively affect our financial position and results of operations.

We are a U.S.-based multinational company subject to tax in multiple U.S. and foreign tax jurisdictions. Significant judgment is required in determining our global provision for income taxes, deferred taxes and other tax liabilities and receivables, and in evaluating our tax positions and other tax attributes on a worldwide basis. We are subject to the periodic examination of our domestic and foreign tax returns by the Internal Revenue Service, state, local, and foreign tax authorities, some of whom are challenging our tax positions. We regularly assess the likelihood of adverse outcomes from these examinations in determining the adequacy of our provision for income taxes and other tax liabilities and have reserved for potential adjustments that may result from these examinations. While we believe our tax estimates are reasonable, the ultimate outcome may differ from the amounts recorded in our financial statements and could materially affect our financial results in the period or periods for which such determination is made. We consider many factors when evaluating and estimating our tax positions and tax benefits, which may require periodic adjustments and may not accurately forecast actual tax audit outcomes. If the ultimate determination of income and other tax liabilities differ from the amounts recorded or accrued, our business, financial condition or results of operations may be adversely impacted.

Changes in tax laws or tax rulings, or changes in interpretations of existing laws, could materially affect our financial position, results of operations, and cash flows. Tax laws are regularly being re-examined and evaluated globally. New laws and interpretations of the law are taken into account for financial statement purposes in the quarter or year that they become applicable. Tax authorities are increasingly scrutinizing the tax positions and transfer pricing of companies and we are (and may continue to be) subject to tax audits in a number of jurisdictions.

Over the last several years, the Organization for Economic Cooperation and Development (“OECD”) has been working on a Base Erosion and Profit Shifting Project that, if implemented, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we do business. A number of countries have enacted legislation to implement the OECD’s 15% global minimum tax regime. As additional jurisdictions enact legislation, transitional relief expires, and other provisions of the minimum tax legislation become effective, our effective tax rate and cash tax payments could increase in future years.

The requirements of being a public company, including developing and maintaining proper and effective disclosure controls and procedures and internal control over financial reporting, may strain our resources and divert management’s attention away from other business concerns.

As a public company, we are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), the Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act, the listing requirements of Nasdaq and other applicable securities rules and regulations that impose various requirements on public companies. Our management and other personnel devote a substantial amount of time to compliance with these requirements and such compliance has increased, and will continue to increase, our legal, accounting and financial costs.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. In order to maintain and improve the effectiveness of such controls, we have expended, and anticipate that we will continue to expend, significant resources, including on accounting and financial staff with appropriate public company experience and technical accounting knowledge to assist in our compliance efforts.

We have incurred and expect to continue to incur significant expenses and devote substantial management effort toward compliance with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act. To assist us in
Docusign, Inc. | 2027 Form 10-Q | 55

complying with these requirements we may need to hire more employees in the future, or engage outside consultants, which will increase our operating expenses.

Despite significant investment, our current controls and any new controls that we develop may become inadequate because of changes in business conditions. Any failure to implement and maintain effective internal control over financial reporting could adversely affect the results of periodic management evaluations and annual independent registered public accounting firm attestation reports regarding the effectiveness of our internal control over financial reporting that are required to be included in the periodic reports that we file with the SEC. If our management team or independent registered public accounting firm were to furnish an adverse report, or if it is determined that we have a material weakness or significant deficiency in our internal control over financial reporting, investors could lose confidence in the accuracy and completeness of our financial reports, the market price of our common stock could decline, and we could be subject to sanctions or investigations by Nasdaq, the SEC or other regulatory authorities or shareholder litigation.

In addition, as we continue to scale and improve our operations, including our internal systems and processes, we currently utilize, and in the future may seek to implement, a variety of critical systems, such as billing, human resources, financial reporting and accounting systems. The implementation and transition to any new critical system may be disruptive to our business if they do not work as planned or if we experience issues related to such implementation or transition, which could have a material adverse effect on our operations and result in compromised internal reporting and processes. Moreover, since most of our employees (including those critical to maintaining an effective system of disclosure controls and internal control over financial reporting) are working and are expected to continue to work for the near term, in either a fully remote or a hybrid environment, risks that we have not contemplated may arise and result in our failure to maintain effective disclosure controls or internal control over financial reporting.

We are subject to governmental export and import controls that could impair our ability to compete in international markets or subject us to liability if we violate the controls.

Our products and solutions are subject to U.S. export controls, including the Export Administration Regulations and economic sanctions administered by the Office of Foreign Assets Control, and we incorporate encryption technology into certain products and solutions. These encryption products and the underlying technology may be exported outside of the U.S. to most jurisdictions only with export authorizations, including by license, a license exception or other appropriate government authorizations.

Furthermore, our activities are subject to U.S. economic sanctions laws and regulations that prohibit dealings without the required authorizations with countries, governments and parties targeted by U.S. sanctions. The U.S. government may not grant us the required authorization for a particular sale. Even if the required authorization for a particular sale is ultimately granted, it may be time-consuming and may result in the delay or loss of sales opportunities. While we take precautions to prevent business dealings in violation of these laws, including obtaining government authorizations, implementing IP address blocking and screenings against U.S. government and international lists of restricted and prohibited persons, we cannot guarantee that the precautions we take will prevent violations of export control and sanctions laws. Violations of U.S. sanctions or export control laws can result in significant fines or penalties and possible incarceration for responsible employees and managers could be imposed for criminal violations of these laws.

In addition, if our strategic partners fail to adhere to U.S. sanctions and export control laws, we may also be adversely affected, through reputational harm as well as other negative consequences including government investigations and penalties. We presently incorporate export control compliance requirements into our strategic partner agreements; however, no assurance can be given that our strategic partners will comply with such requirements.

Foreign governments also regulate the import and export of certain encryption and other technology, and have implemented, and may in the future implement, sanctions and export control laws that could limit our ability to distribute our products and solutions or could limit our end-customers’ ability to implement our products and solutions in those countries. Changes in our products and solutions or future changes in export and import regulations may create delays in the introduction of our products and solutions in international markets, prevent our end-customers with international operations from deploying our products and solutions globally or, in some cases, prevent the export or import of our products and solutions to certain countries, governments or parties altogether. Any decreased use of our products and solutions or limitation on our ability to export or sell our products and solutions would adversely affect our business, operating results and prospects.

We are subject to anti-corruption, anti-bribery, anti-money laundering, and similar laws, and non-compliance with such laws can subject us to criminal and/or civil liability and harm our business.

Docusign, Inc. | 2027 Form 10-Q | 56

We are subject to the FCPA, the U.S. domestic bribery statute contained in 18 U.S.C. § 201, the U.S. Travel Act, the U.K. Bribery Act, and other anti-bribery and anti-money laundering laws in the countries in which we conduct activities. As we increase our international sales and business and sales to the public sector internationally, we may engage with business partners and third-party intermediaries to market our products and solutions and to obtain necessary permits, licenses, and other regulatory approvals. In addition, we or our third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities. We can be held liable for the corrupt or other illegal activities of these third-party intermediaries and our employees, representatives, contractors, partners, and agents, even if we do not explicitly authorize such activities.

While we have policies and controls to address compliance with such laws, we cannot assure you that our employees and agents will not take actions in violation of our policies and applicable law, for which we may be ultimately held responsible. As we increase our international sales and business, our risks under these laws may increase.

Detecting, investigating and resolving actual or alleged violations can require a significant diversion of time, resources and attention from senior management. In addition, noncompliance with anti-corruption, anti-bribery, or anti-money laundering laws could subject us to whistleblower complaints, investigations, sanctions, settlements, prosecution, other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, suspension and/or debarment from contracting with certain persons, the loss of export privileges, reputational harm, adverse media coverage and other collateral consequences. If any subpoenas or investigations are launched, or governmental or other sanctions are imposed, or if we do not prevail in any relevant civil or criminal litigation, our business, operating results and financial condition could be materially harmed. In addition, responding to any action will likely result in a materially significant diversion of management’s attention and resources and significant defense costs and other professional fees. Enforcement actions and sanctions could further harm our business, operating results and financial condition.

Risks Related to our Common Stock

Our stock price may be volatile, and the value of our common stock may decline.

The market price of our common stock may be highly volatile and may fluctuate or decline substantially as a result of a variety of factors, some of which are beyond our control or are related in complex ways, including:

▪ actual or anticipated fluctuations in our financial condition and operating results;
▪ customer demand for our solutions and the pace of the digital transformation of business;
▪ changes in senior management or key personnel;
▪ general economic, regulatory and market conditions, including inflation and interest rate fluctuations;
▪ variance in our financial performance from expectations of securities analysts;
▪ issuance of research reports by securities analysts, including publishing unfavorable reports;
▪ certain assumptions or perceptions made by our customers or industry and securities analysts related to our IAM platform;
▪ changes in the prices of subscriptions to our products and solutions;
▪ changes in our projected operating and financial results;
▪ changes in laws or regulations applicable to our products and solutions;
▪ announcements by us or our competitors of significant business developments, acquisitions or new offerings;
▪ rumors and market speculation made by external parties that involve us or other companies in our industry;
▪ our involvement in any litigation;
▪ future sales of our common stock or other securities by us or our stockholders;
▪ the consummation, and the anticipated benefits, of our stock repurchase program;
▪ the trading volume of our common stock;
▪ changes in the anticipated future size and growth rate of our market;
▪ changes and uncertainty in the political climate in the U.S.; and
▪ terrorist attacks, natural disasters and the effects of climate change, regional and global conflicts, sanctions, laws and regulations that prohibit or limit operations in certain jurisdictions, public health crises or other such events impacting countries where we have operations.

In addition, broad market and industry fluctuations, as well as general economic, political, regulatory and market conditions, may negatively impact the market price of our common stock. In the past, companies that have experienced volatility in the market price of their securities have been subject to securities class action litigation. We have been, and may in the future be, subject to this type of litigation, which could result in substantial costs, divert our management’s attention from our business and adversely affect our business. For more information on our pending legal proceedings, see Part II Item 1. Legal Proceedings of this Quarterly Report on Form 10-Q.
Docusign, Inc. | 2027 Form 10-Q | 57

Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of our company more difficult, limit attempts by our stockholders to replace or remove our current management and limit the market price of our common stock.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws may have the effect of delaying or preventing a change of control or changes in our management. Our amended and restated certificate of incorporation and amended and restated bylaws include provisions that:

▪ authorize our board of directors to issue, without further action by the stockholders, shares of undesignated preferred stock with terms, rights and preferences determined by our board of directors that may be senior to our common stock;
▪ require that any action to be taken by our stockholders be effected at a duly called annual or special meeting and not by written consent;
▪ specify that special meetings of our stockholders can be called only by our board of directors, the chairperson of our board of directors, or our chief executive officer;
▪ establish an advance notice procedure for stockholder proposals to be brought before an annual meeting, including proposed nominations of persons for election to our board of directors;
▪ establish that our board of directors is divided into three classes, with each class serving three-year staggered terms;
▪ prohibit cumulative voting in the election of directors;
▪ provide that our directors may be removed for cause only upon the vote of sixty-six and two-thirds percent (66 2/3%) of our outstanding shares of common stock;
▪ provide that vacancies on our board of directors may be filled only by a majority of directors then in office, even though less than a quorum; and
▪ require the approval of our board of directors or the holders of at least sixty-six and two-thirds percent (66 2/3%) of our outstanding shares of common stock to amend our bylaws and certain provisions of our certificate of incorporation.

These provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of our management. In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which generally, subject to certain exceptions, prohibits a Delaware corporation from engaging in any of a broad range of business combinations with any “interested” stockholder for a period of three years following the date on which the stockholder became an “interested” stockholder. Any delay or prevention of a change of control transaction or changes in our management could cause the market price of our common stock to decline.

Our amended and restated certificate of incorporation provides that the Court of Chancery of the State of Delaware or the U.S. federal district courts are the exclusive forums for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers or other employees.

Our amended and restated certificate of incorporation provides that the Court of Chancery of the State of Delaware is the sole and exclusive forum for any derivative action or proceeding brought on our behalf, any action asserting a breach of fiduciary duty owed by any of our directors, officers or other employees to us or our stockholders, any action asserting a claim against us arising pursuant to any provisions of the Delaware General Corporation Law, our amended and restated certificate of incorporation or our amended and restated bylaws, or any action asserting a claim against us that is governed by the internal affairs doctrine. If a court were to find any of these exclusive-forum provisions in our amended and restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving the dispute in other jurisdictions, which could seriously harm our business.

Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all claims brought to enforce any duty or liability created by the Securities Act or the rules and regulations thereunder. Our amended and restated certificate of incorporation, however, provides that the U.S. federal district courts will be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act. In December 2018, the Delaware Chancery Court issued an opinion invalidating provisions similar to ours limiting to U.S. federal court the forum in which a stockholder is able to bring a claim under the Securities Act (“Federal Forum Provision”). On March 18, 2020, however, the Delaware Supreme Court reversed the decision of the Delaware Chancery Court and held that such provisions are facially valid. In light of that recent decision, we announced that we may in the future enforce our Federal Forum Provision. While there can be no assurance that federal courts or other state courts will follow the holding of the
Docusign, Inc. | 2027 Form 10-Q | 58

Delaware Supreme Court or determine that the Federal Forum Provision should be enforced in a particular case, application of the Federal Forum Provision generally means that suits brought by our stockholders to enforce any duty or liability created by the Securities Act must be brought in federal court and cannot be brought in state court. While the Federal Forum Provision does not apply to suits brought to enforce any duty or liability created by the Exchange Act, Section 27 of the Exchange Act creates exclusive federal jurisdiction over all claims brought to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder. Accordingly, actions by our stockholders to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder also must be brought in federal court. Our stockholders will not be deemed to have waived our compliance with the federal securities laws and the regulations promulgated thereunder.

Any person or entity purchasing or otherwise acquiring or holding any interest in any of our securities shall be deemed to have notice of and consented to our exclusive forum provisions, including the Federal Forum Provision. These provisions may limit a stockholder’s ability to bring a claim in a judicial forum of the stockholder's choosing for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees.

General Risks

Unfavorable conditions in our industry or the global economy or reductions in information technology spending could limit our ability to grow our business and negatively affect our operating results.

Our operating results may vary based on the impact of changes in our industry or the global economy on us and our existing and prospective customers. The revenue growth and profitability of our business depend on demand for our products and solutions. Current or future economic and global market uncertainties or downturns could adversely affect our business and operating results. Economic uncertainty and associated macro-economic conditions make it difficult for our customers and us to accurately forecast and plan future business activities, and could cause our customers to slow spending on our products. Negative conditions in the general economy both in the U.S. and abroad, including conditions resulting from inflation, changes in interest rates or foreign exchange rates, tariffs and changes in trade policies and practices, gross domestic product growth, financial and credit market fluctuations, geopolitical conflict, natural catastrophes and the effects of climate change, public health crises, and terrorist attacks in the U.S., Europe, the Asia Pacific region or elsewhere, could cause a decrease in business investments, including spending on information technology, and negatively affect the growth of our business. In addition, unfavorable conditions in certain industry sectors could impact customers or partners disproportionately, which could also impact the demand for our products. To the extent our products and solutions are perceived by customers and potential customers as costly, or too difficult to deploy or migrate to, our revenue may be disproportionately affected by delays or reductions in general information technology spending. Also, competitors, many of whom are larger and more established than we are, may respond to market conditions by lowering prices and attempting to lure away our customers. In addition, the increased pace of consolidation in certain industries may result in reduced overall spending on our products and solutions. We cannot predict the timing, strength or duration of any economic slowdown, instability or recovery, generally or within any particular industry. If the economic conditions of the general economy or markets in which we operate worsen from present levels, our business, operating results and financial condition could be adversely affected.

Natural catastrophic events and man-made problems such as power disruptions, computer viruses, data security breaches, regional or global conflicts, and terrorism may disrupt our business.

We rely heavily on our network infrastructure and information technology systems, including our security-related systems, for our business operations. A disruption or failure of these systems in the event of online attack, earthquake, fire, terrorist attack, public health crisis, power loss, telecommunications failure or other similar catastrophic event, including as a result of the effects of climate change, could cause system interruptions, delays in accessing our service, reputational harm and loss of critical data or could prevent us from providing our products and solutions to our customers. A catastrophic event that results in the destruction or disruption of our data centers, or our network infrastructure or information technology systems, including any errors, defects or failures in third-party hardware, could affect our ability to conduct normal business operations and adversely affect our operating results. Additionally, while we believe our exposure from the recent conflicts in Ukraine and the Middle East is limited, we could experience unanticipated disruptions to our business as a result of current or future regional and global conflicts, including sanctions or other laws and regulations prohibiting or limiting operations in certain jurisdictions, increased risks of potential cyberattacks, related impacts to our customers, or micro- or macro-economic effects on the global economy.

Docusign, Inc. | 2027 Form 10-Q | 59

ITEM 2. Unregistered Sales of Equity Securities, Use of Proceeds, and Issuer Purchases of Equity Securities.

Purchases of Equity Securities by the Issuer and Affiliated Purchasers

The following table summarizes our stock repurchases during the three months ended April 30, 2026:

Period Total Number of Shares Purchased (1)
Average Price Paid Per Share (2)
Total Number of Shares Purchased as Part of Publicly Announced Plans or Programs Approximate Dollar Value of Shares that May Yet Be Purchased Under the Plans or Programs
(in thousands)

February 1 - February 28 3,418,811 $46.24 3,418,811 $582,207
March 1 - March 31 1,486,804 $47.05 1,486,804 $2,512,258
April 1 - April 30 1,903,823 $47.00 1,903,823 $2,422,782

Total 6,809,438 6,809,438 $2,422,782

(1) Our board of directors authorized a stock repurchase program, which commenced in March 2022. Most recently, in March 2026, our board of directors authorized an increase to our existing stock repurchase program for an additional amount of up to $2.0 billion of our outstanding common stock, increasing our total authorization to an aggregate $4.5 billion. Repurchases of our common stock may be effected from time to time, either on the open market, in block trades, in privately negotiated transactions, and through other transactions in accordance with applicable securities laws. The program does not obligate us to repurchase any specific number of shares and may be discontinued at any time. The program has no expiration date and will continue until otherwise suspended, terminated, or modified at any time for any reason by our board of directors. See Note 8 of this Quarterly Report on Form 10-Q for additional information related to stock repurchases.

(2) Average price paid includes costs associated with the repurchases, excluding the 1% excise tax as a result of the IRA.

Docusign, Inc. | 2027 Form 10-Q | 60

ITEMS 3 and 4 are not applicable and have been omitted.

ITEM 5. Other Information

During the three months ended April 30, 2026, the following officers and directors of the Company entered into trading plans during an open insider trading window and intended to satisfy the affirmative defense of Rule 10b5-1(c) under the Exchange Act and the Company’s policies on insider trading:

Name (1)
Title Adoption Date Earliest Sale Date Expiration Date Aggregate # of securities to be sold Aggregate # of securities to be purchased
Robert Chatwani President, General Manager, Growth March 20, 2026 June 22, 2026 March 31, 2027 up to 165,168
N/A
Blake Grayson Chief Financial Officer March 31, 2026 July 1, 2026 March 31, 2027 up to 125,000
N/A

(1) The aggregate # of securities to be sold includes the maximum payout for certain unvested PSUs.

Each of the 10b5-1 plans in the above table included a representation from the director or officer to the broker administering the plan that such individual was not in possession of any material nonpublic information regarding the Company or the securities subject to the plan. A similar representation was made to the Company in connection with the adoption of the plan under the Company’s insider trading policy. Those representations were made as of the date of adoption of the 10b5-1 plan, and speak only as of that date. In making those representations, there is no assurance with respect to any material nonpublic information of which the director or officer was unaware, or with respect to any material nonpublic information acquired by the director or officer or the Company after the date of the representation.

ITEM 6. Exhibits

The documents listed in the Exhibit Index of this Quarterly Report on Form 10-Q are incorporated by reference or are filed with this Quarterly Report on Form 10-Q, in each case as indicated therein (numbered in accordance with Item 601 of Regulation S-K).

Docusign, Inc. | 2027 Form 10-Q | 61

EXHIBIT INDEX
Exhibit Number Description Form File No. Incorporated by Reference Exhibit Filing Date
3.1 Amended and Restated Certificate of Incorporation.
8-K 001-38465 3.1 May 1, 2018
3.2 Amended and Restated Bylaws.
8-K 001-38465 3.1 March 11, 2024
31.1 Certification of the Chief Executive Officer pursuant to Exchange Act Rule 13a-14 as adopted pursuant to Section 302 of the Sarbanes-Oxley Act of 2002.
Filed herewith
31.2 Certification of the Chief Financial Officer pursuant to Exchange Act Rule 13a-14 as adopted pursuant to Section 302 of the Sarbanes-Oxley Act of 2002.
Filed herewith
32.1* Certification of the Chief Executive Officer and the Chief Financial Officer pursuant to 18 U.S.C. Section 1350, as adopted pursuant to Section 906 of the Sarbanes-Oxley Act of 2002.
Filed herewith
101.INS Inline XBRL Instance Document (the instance document does not appear in the Interactive Data File because its XBRL tags are embedded within the Inline XBRL document).
101.SCH Inline XBRL Taxonomy Extension Schema Document.
101.CAL Inline XBRL Taxonomy Extension Calculation Linkbase Document.
101.DEF Inline XBRL Taxonomy Definition Linkbase Document.
101.LAB Inline XBRL Taxonomy Extension Labels Linkbase Document.
101.PRE Inline XBRL Taxonomy Extension Presentation Linkbase Document.
104 Cover Page Interactive Data File (formatted as inline XBRL and contained in Exhibit 101)

† We have omitted the schedules or exhibits to this Exhibit in accordance with Regulation S-K Item 601(a)(5). A copy of any omitted schedule and/or exhibit will be furnished to the Securities and Exchange Commission upon its request.

* The certifications furnished in Exhibit 32.1 hereto are deemed to accompany this Quarterly Report on Form 10-Q and will not be deemed “filed” for purposes of Section 18 of the Securities Exchange Act of 1934, as amended, except to the extent that the registrant specifically incorporates it by reference.

Docusign, Inc. | 2027 Form 10-Q | 62

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.

Date: June 5, 2026
DOCUSIGN, INC.

By: /s/ Allan Thygesen
Allan Thygesen
Chief Executive Officer
(Principal Executive Officer)

By: /s/ Blake Grayson
Blake Grayson
Chief Financial Officer
(Principal Accounting and Financial Officer)

Docusign, Inc. | 2027 Form 10-Q | 63