Our businesses routinely encounter and address risks, many of which could cause our future results to be materially different than we presently anticipate. Below, we describe material factors, events and uncertainties that make an investment in our securities speculative or risky, categorized solely for ease of reference as strategic, operational, legal and compliance, and financial risks, and which you should consider carefully in evaluating our business. The following events and consequences could have a material adverse effect on our business, growth, prospects, financial condition, results of operations, cash flows, liquidity, reputation and credit rating, and the trading price of our common stock could decline. Some of the factors, events, and uncertainties discussed below may have occurred in the past. However, these disclosures are not representations as to whether or not the factors, events or uncertainties have occurred in the past, instead they reflect our beliefs and opinions as to the factors, events or uncertainties that could materially and adversely affect us in the future. We could also be affected by other events, factors or uncertainties that are presently unknown to us or that we do not currently consider to present significant risks to our business. These risks may be amplified by the effects of global developments and conditions or events, including macroeconomic and geopolitical conditions, which have caused significant global economic instability and uncertainty. Therefore, you should not consider the following risks to be a complete statement of all the potential risks or uncertainties that we face. STRATEGIC RISKS We face intense competitive pressures that may harm our operating results. We face intense competition in all of our businesses, and we expect competition to continue to intensify in the future. Our competitors and potential competitors range from large and established entities to emerging start-ups. Our competitors may introduce superior products and services, successfully use and deploy new technologies such as AI that may reduce customer demand for our products or services, reduce prices, have greater technical, marketing and other resources, have greater name recognition, have larger installed bases of customers, have well-established relationships with our current and potential customers and partners, advertise aggressively or beat us to market with new products and services. In addition, we face competition from existing companies with large established consumer user bases and broad-based platforms, who may change or expand the focus of their business strategies and marketing to target our customers, including small businesses, tax and personal financial management customers. We also face competition from companies with a variety of business models and monetization strategies, including increased competition from providers of free and low cost offerings, particularly in our tax, accounting, payments and consumer finance platform businesses. We have also introduced free offerings in several categories, but we may not be able to attract and retain customers as effectively as our competitors with different business models. In addition, other providers of free offerings may provide features that we do not offer and customers who have formerly paid for our products and services may elect to use our competitors’ free offerings instead. These competitive factors may diminish our revenue and profitability, and harm our ability to acquire and retain customers. Our consumer tax business also faces significant, increasing competition from the public sector, where we face the risk of federal and state taxing authorities implementing revenue-raising strategies that involve developing and providing government tax software or other government return preparation systems at public expense. These or similar programs have been and may continue to be introduced or expanded in the future, which may change the voluntary compliance tax system in ways that could cause us to lose customers and revenue. For example, although the IRS free direct filing system was suspended, proponents of these programs continue to advocate for them. Additionally, the legacy IRS Free File Program enables the IRS to offer free commercial tax software directly to qualifying taxpayers, and taxpayer adoption of this program could expand with increased awareness of and government support for the program. Through these or other programs, federal and state governments are or could become publicly funded direct competitors of the U.S. tax services industry and of Intuit. Government funded services that curtail or eliminate the role of taxpayers in preparing their own taxes could potentially have material and adverse revenue implications on us. Intuit Q3 Fiscal 2026 Form 10-Q 50 Table of Contents Future revenue growth depends upon our ability to adapt to technological change and successfully extend our platform, introduce new and enhanced products, features, services and business models. We operate in industries that are characterized by rapidly changing technology, evolving industry standards and frequent new product introductions. To meet the evolving needs and expectations of our customers and partners and attract and retain top technical talent, we must continue to innovate, develop and extend our platform, introduce new products, services, and features, and enhance our ability to anticipate and solve new and existing customer problems, including with emerging technologies, such as AI. If we are not able to do this successfully, we may face a competitive disadvantage and our business could be harmed. We have and will continue to devote significant resources to continue to develop our skills, tools and capabilities to capitalize on existing and emerging technologies, including AI. There can be no assurance that we or our customers will realize the expected benefits from these investments. Legislation or regulatory changes in these areas may mandate changes in our products that make them less attractive to users and hinder our ability to leverage emerging technologies and build out our platform capabilities. Our consumer and professional tax businesses depend significantly on revenue from customers who return each year to use our updated tax preparation and filing software and services. They include customers who use our free consumer tax products and whose tax scenarios evolve in subsequent years to require paid services. Encouraging continued use of our offerings in successive years can become increasingly difficult if customers do not perceive our offerings to provide continuing or meaningfully incremental value. The growth of our business depends, in part, on our ability to successfully provide customers value in this way. In addition, when customers consent to the use of their data across our platform, we work to provide additional benefits to them through our existing offerings and through the development of new offerings. Our inability to demonstrate value of any of these offerings to existing customers may negatively impact our ability to build new data-driven offerings and our revenue. We may expend a significant amount of resources and management attention on offerings that do not ultimately succeed in their markets. We have encountered difficulty in launching new offerings in the past. If we misjudge customer needs in the future, our new offerings may not succeed and our revenues and earnings may be harmed. We have also invested, and in the future, expect to invest in new business models, technologies, geographies, strategies and initiatives. Such endeavors may involve significant risks and uncertainties, including a rapidly changing regulatory environment, diversion of management's attention from current operations, expenses associated with the initiatives, inadequate return on investments, and social or ethical scrutiny. Because these new initiatives are inherently risky, they may not be successful and may harm our financial condition, operating results, or reputation. We rely on intellectual property in our products and services. Many of our products and services utilize our own intellectual property, as well as the intellectual property of third parties, which we license under agreements that may need to be renewed or renegotiated from time to time. We may not be able to obtain licenses to these third-party technologies or content on reasonable terms, or at all, in the future. If we are unable to obtain the rights necessary to use certain intellectual property in our products and services, we may not be able to provide the affected offerings, and customers who are currently using the affected product may be disrupted, which may in turn harm our future financial results, damage our brand, and result in customer loss. Also, we and our customers have been and may continue to be subject to infringement claims as a result of the third-party intellectual property incorporated in our offerings, including through our use of AI. If an infringement claim is successfully asserted against us, it could require us to pay substantial damages or ongoing royalty payments, prevent us from offering our services, require us to change our products, technology, or business practices, or require our compliance with other unfavorable contractual terms. Even if we are not ultimately liable for any potential infringement, pending claims require us to use significant resources, require management attention and could result in loss of customers. Some of our offerings include third-party software that is licensed under “open source” licenses, some of which may include a requirement that, under certain circumstances, we make available, or grant licenses to, any modifications or derivative works we create based upon the open source software. Our established internal review and approval processes may not mitigate these risks, and we cannot be sure that all open source software is submitted for approval prior to use in our products. Our inability to mitigate the risks associated with the usage of open source software may harm our business. Our intellectual property rights are valuable, and any inability to protect them could reduce the value of our products, services and brand. Our patents, trademarks, trade secrets, copyrights, domain names and other intellectual property rights are important assets for us. We aggressively protect our intellectual property rights by relying on federal, state and common law rights in the U.S. and internationally, as well as a variety of administrative procedures and contractual restrictions. However, the efforts that we take to protect our proprietary rights, including through litigation, monitoring, and enforcement programs, may not always be sufficient or effective. We often observe unauthorized copies of our software being sold through online marketplaces, and despite our effort to implement technical countermeasures, we expect piracy to continue to remain a persistent problem that results in lost revenue and increased expenses. In addition, there is uncertainty about the validity and enforceability of intellectual property rights that may result from our use of GenAI. Protecting our intellectual property rights is costly and time consuming and may not be successful in every location. Any significant impairment of our intellectual property rights could harm our business, our brand, and our ability to compete. Intuit Q3 Fiscal 2026 Form 10-Q 51 Table of Contents Our business depends on our strong reputation and the value of our brands. Developing and maintaining awareness of our brands and platform strategy is critical to achieving widespread acceptance of our existing and future products and services and is an important element in attracting new customers and expanding our business with existing customers. Adverse publicity (whether or not justified) relating to events, activities, or views attributed to us, members of our workforce or Board of Directors, agents, third parties we rely on, or our users, may tarnish our reputation and reduce the value of our brands. Perceived social harm or unfairness of outcomes relating to the use of new and evolving technologies such as AI in our offerings, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. Our brand value also depends on our ability to provide secure and trustworthy products and services, as well as our ability to protect and use our customers’ data in a manner that meets their expectations. In addition, a security incident that results in unauthorized disclosure of our customers’ sensitive data could cause material reputational harm. Damage to our reputation and loss of brand equity may reduce demand for our products or services and thus have an adverse effect on our future financial results, as well as require additional resources to rebuild our reputation and restore the value of the brands and could also reduce our stock price. Our efforts related to environment, social, and governance matters expose us to risks that could adversely affect our reputation and performance. Environmental, social and governance matters continue to be an area of focus for shareholders, regulators, customers, employees, and other stakeholders. Our efforts and reporting on these matters expose us to risks that could adversely affect our reputation, operations, and performance. This could happen if we fail, or are perceived to fail, to meet evolving stakeholder expectations or varying state or federal regulatory requirements, or to uphold or achieve our public commitments. Standards and best practices for tracking and reporting these matters continue to evolve and we may not be able to implement new and changing standards and best practices in ways that meet the varied expectations of all of our stakeholders. Any of the foregoing may also expose us to increased scrutiny from stakeholders and negatively impact demand for our products, our ability to attract and retain talent or our relationships with customers, suppliers or other stakeholders. Our acquisition and divestiture activities may disrupt our ongoing business, may involve increased expenses and may present risks not contemplated at the time of the transactions. We have acquired and may continue to acquire companies, products, technologies and talent that complement our strategic direction, both in and outside the United States. Acquisitions involve significant risks and uncertainties, including: •inability to successfully integrate the acquired technology, data assets and operations into our business and maintain uniform standards, controls, policies, and procedures; •inability to realize synergies or anticipated benefits within the expected time frame or at all; •disruption of our ongoing business and distraction of management; •challenges retaining the key employees, customers, resellers and other business partners of the acquired operation; •the internal control environment of an acquired entity may not be consistent with our standards or with regulatory requirements, and may require significant time and resources to align or rectify; •unidentified issues not discovered in our due diligence process, including product or service quality issues, security policies, standards, and practices, intellectual property issues and legal contingencies; •failure to successfully further develop an acquired business or technology and any resulting impairment of amounts currently capitalized as intangible assets; •risks associated with businesses we acquire or invest in, which may differ from or be more significant than the risks our other businesses face; •in the case of foreign acquisitions and investments, the impact of particular economic, tax, currency, political, legal and regulatory risks associated with specific countries; and •to the extent we use debt to fund acquisitions or for other purposes, our interest expense and leverage will increase significantly, and to the extent we issue equity securities as consideration in an acquisition, current shareholders’ percentage ownership and earnings per share will be diluted. We have divested and may in the future divest certain assets or businesses that no longer fit with our strategic direction or growth targets. Divestitures involve significant risks and uncertainties, including: •inability to find potential buyers on favorable terms; •failure to effectively transfer liabilities, contracts, facilities and employees to buyers; •requirements that we retain or indemnify buyers against certain liabilities and obligations; •the possibility that we will become subject to third-party claims arising out of such divestiture; •challenges in identifying and separating the intellectual property, systems and data to be divested from the intellectual property, systems and data that we wish to retain; Intuit Q3 Fiscal 2026 Form 10-Q 52 Table of Contents •inability to reduce fixed costs previously associated with the divested assets or business; •challenges in collecting the proceeds from any divestiture; •disruption of our ongoing business and distraction of management; •loss of key employees who leave us as a result of a divestiture; and •if customers or partners of the divested business do not receive the same level of service from the new owners, or the new owners do not handle the customer data with the same level of care, our other businesses may be adversely affected, to the extent that these customers or partners also purchase other products offered by us or otherwise conduct business with our retained business. In addition, any acquisition or divestiture that we announce may not be completed if closing conditions are not satisfied. Evolving regulatory expectations and changes in the political environment may make it more challenging to obtain any required regulatory approval. Because acquisitions and divestitures are inherently risky, our transactions may not be successful and may, in some cases, harm our operating results or financial condition. In particular, if we are unable to successfully operate together with any company that we acquire to achieve shared growth opportunities or combine reporting or other processes within the expected time frame or at all, there may be a material and adverse effect on the benefits that we expect to achieve as a result of the acquisition, and we could experience additional costs or loss of revenue. Moreover, adverse changes in market conditions and other factors, including those listed above, may cause an acquisition to be dilutive to Intuit’s operating earnings per share for a period of time. Any dilution of our non-GAAP diluted earnings per share could cause the price of shares of Intuit Common Stock to decline or grow at a reduced rate. OPERATIONAL RISKS Security incidents, improper access to or disclosure of our data or customers’ data, or other cyberattacks on our systems could harm our reputation, business, and financial condition. We host, collect, use and retain large amounts of sensitive and personal customer and workforce data, including credit card information, tax return information, bank account numbers, credit report information, login credentials and passwords, personal and business financial data, transaction records, social security numbers and payroll information, as well as our confidential, nonpublic business information. The significant resources we expend to implement security protections designed to shield this data against potential theft and security incidents cannot provide absolute security. Our technologies, systems, and networks have been subject to, and are increasingly likely to continue to be the target of, cyberattacks, computer viruses, ransomware or other malware, worms, social engineering, malicious software programs, insider threats, denial-of-service attacks and other cybersecurity threats that have in the past, and could in the future, result in the unauthorized release, gathering, monitoring, use, loss or destruction of sensitive and personal data of our customers and our workforce, or Intuit's sensitive business data or cause temporary or sustained unavailability of our data, software, and systems. Cybersecurity incidents can be caused by malicious third parties, acting alone or in groups, or more sophisticated organizations, including nation-states or state-sponsored organizations, and the risks could be elevated in connection with significant armed conflicts, acts of war or terrorism. Customers who fail to update their systems, continue to run software that we no longer support, fail to install security patches on a timely basis or inadequately use security controls create vulnerabilities and make it more difficult for us to detect and prevent these kinds of attacks. Further, we are increasingly incorporating open source software into our products, and there may be vulnerabilities in open source software that make it susceptible to cyberattacks. In addition, techniques used to obtain unauthorized access to sensitive information change frequently and, as technologies like AI develop rapidly, malicious third parties are using these technologies to create new sophisticated attack methods that are increasingly automated, targeted and coordinated and more difficult to defend against. We have been and may in the future be a more frequent target of cyberattacks because cyber-criminals tend to focus their efforts on well-known offerings that are popular among customers and hold sensitive personal or financial information. Further, the security measures that we implement may not be able to prevent unauthorized access to our products and our customers’ account data. Malicious third parties have in the past, and may in the future, be able to fraudulently induce members of our workforce, customers, vendors, partners, or users by social engineering means, such as email phishing, to disclose sensitive information in order to gain access to our systems. Unauthorized access to or disclosure of customer data may occur due to inadequate use of security controls by our customers or our workforce. Accounts created with weak or recycled passwords could allow cyber-attackers to gain access to customer data. Unauthorized persons could gain access to customer accounts if customers do not maintain effective access controls of their systems and software. Inadvertent exposure of data or access to our systems may also be caused by members of our workforce, including by their error or use of AI. Criminals may also use stolen identity information obtained outside of our systems to gain unauthorized access to our customers’ data. We have experienced such instances in the past and as the broader accessibility of stolen identity information increases, we may experience further instances of unauthorized access to our systems through the use of stolen identity information of our customers or our workforce in the future. Further, our customers may choose to use the same login credentials across multiple products and services unrelated to our products. Such customers’ login credentials may be stolen from products offered by third-party service providers unrelated to us and the stolen identity information may be used by a malicious third party to access our products, which could result in disclosure of confidential information. In addition, our hybrid Intuit Q3 Fiscal 2026 Form 10-Q 53 Table of Contents workplace model, where our workforce spends a portion of their time working away from our offices, increases the potential for attacks and adds operational complexity that exacerbates our security-related risks. Further, because we have created an ecosystem where customers can have one identity across multiple Intuit products, a security incident may give access to increased amounts of customer data. From time to time, we detect, or receive notices from customers or public or private agencies that they have detected, actual or perceived vulnerabilities in our infrastructure, our software or third-party software components that are distributed with our products or fraudulent activity by unauthorized persons utilizing our products with stolen customer identity information. The existence of such vulnerabilities or fraudulent activity, even if they do not result in a security breach, may undermine customer confidence as well as the confidence of government agencies that regulate our offerings. Such perceived vulnerabilities could also seriously harm our business by tarnishing our reputation and brand and limiting the adoption of our products and services and could cause our stock price to decline. In some cases, such vulnerabilities may not be immediately detected, which could exacerbate the risk of a security incident and the related effects on our businesses. While we maintain cybersecurity insurance, our insurance may not be sufficient to cover all liabilities described herein. The occurrence of any of the foregoing may result in disclosure of confidential information, loss of customer confidence in our products, possible litigation, material harm to our reputation and financial condition, disruption of our or our customers’ business operations, and a decline in our stock price. Additionally, our use of Credit Karma member data is subject to an order issued in 2014 by the Federal Trade Commission (FTC) that, among other things, requires maintenance of a comprehensive security program relating to the development and management of new and existing products and services and biennial independent security assessments for 20 years from the date of the order. Our failure to fulfill the requirements of the FTC’s order could result in fines, penalties, enforcement inquiries, investigations and claims, and negatively impact our business and reputation. A cybersecurity incident affecting the third parties we rely on could expose us or our customers to a risk of loss or misuse of confidential information and significantly damage our reputation. We depend on a number of third parties, including vendors, developers and partners who are critical to our business. We or our customers may grant access to customer data to these third parties to help deliver customer benefits, or to host certain of our and our customers' sensitive and personal data. In addition, we share sensitive, nonpublic business information (including, for example, materials relating to financial, business and legal strategies) with other vendors in the ordinary course of business. It is possible that malicious third parties may misrepresent their intended use of data or may circumvent our controls, resulting in accidental or intentional disclosure or misuse of our customer or workforce data, despite our efforts to conduct background checks of our workforce, conduct reviews of partners, developers, and vendors and use commercially available technologies to limit access to systems and data. Further, while we conduct due diligence on the security and business controls of our third-party partners, we may not have the ability to effectively monitor or oversee the implementation of these control measures. Malicious third parties may be able to circumvent these security and business controls or exploit vulnerabilities that may exist in these controls, resulting in the disclosure or misuse of sensitive business and personal customer or workforce information and data. In addition, malicious actors may attempt to use the information technology supply chain to compromise our systems by, for example, introducing malware through software updates. This risk is exacerbated with the advancement of technologies like AI, which malicious third parties are using to create new, sophisticated and more frequent attacks on our third-party partners. A security incident involving third parties we rely on may have serious negative consequences for our businesses, including disclosure of sensitive customer or workforce data, or confidential or competitively sensitive information regarding our business, including intellectual property and other proprietary data; make our products more vulnerable to fraudulent activity; cause temporary or sustained unavailability of our software and systems; result in possible litigation, fines, penalties and damages; result in loss of customer confidence; cause material harm to our reputation and brands; lead to further regulation and oversight by federal or state agencies; result in an adverse financial condition; and result in a reduced stock price. Concerns about the broader cybersecurity environment could deter current and potential customers from adopting our products and services and damage our reputation. The continued occurrence of cybersecurity incidents affecting governments, businesses and consumers in general indicates that we operate in an external environment where cybersecurity incidents are increasingly more common and frequent. If the global cybersecurity environment worsens, and there are increased instances of security breaches of third-party offerings where consumers’ data and sensitive information is compromised, consumers may be less willing to use online offerings, particularly offerings like ours in which customers often share sensitive financial data. Additionally, political uncertainty and military actions may subject us and our service providers to heightened risks of security incidents. In addition, the increased availability of data obtained as a result of cybersecurity incidents affecting third-party offerings could make our own products more vulnerable to fraudulent activity. Even if our products are not affected directly by such incidents, any such incident could damage our reputation and deter current and potential customers from adopting our products and services or lead customers to cease using online and connected software products to transact financial business altogether. If we are unable to effectively combat the increasing amount and sophistication of fraudulent activities by malicious third parties, we may suffer losses, which may be substantial, and lose the confidence of our customers and government agencies and our revenues and earnings may be harmed. Intuit Q3 Fiscal 2026 Form 10-Q 54 Table of Contents Many of the industries in which we operate have been experiencing an increasing amount of fraudulent activities by malicious third parties, and those fraudulent activities are becoming increasingly sophisticated, including through the use of AI. We have been and may from time to time become targeted by such malicious third parties engaging in fraudulent activities. Any such fraudulent activities may adversely impact our business, and the risk is heightened when our workforce is working away from our offices under our hybrid work model. In addition to any losses that may result from such fraud, which may be substantial, a loss of confidence by our customers or by governmental agencies in our ability to prevent fraudulent activity may seriously harm our business and damage our brand. If we cannot adequately combat such fraudulent activity, governmental authorities may refuse to allow us to continue to offer the affected services, or these services may otherwise be adversely impacted, which could include federal or state tax authorities refusing to allow us to process our customers’ tax returns electronically, resulting in a significant adverse impact on our business, earnings, and revenue. As fraudulent activities become more pervasive and increasingly sophisticated, our fraud detection and prevention measures, and the teams that create and maintain them, must become correspondingly more sophisticated to combat them across the various industries in which we operate. Accordingly, we have implemented and may continue to implement risk control mechanisms that could make it more difficult for legitimate customers to obtain and use our products. These control mechanisms could result in lost revenue and negatively impact our earnings. If we fail to process transactions effectively or fail to adequately protect against disputed or potential fraudulent activities, our business may be harmed. Our operations process a significant volume and dollar value of transactions on a daily basis, especially in our money and personal financial management businesses. It is possible that we may make errors or that funds may be misappropriated due to fraud despite our efforts to ensure that effective processing systems and controls are in place to handle transactions appropriately. The likelihood of any such error or misappropriation is magnified as we increase the volume and speed of the transactions we process. If we are unable to effectively manage our systems and processes, or if there is an error in our products, we may be unable to process customer data in an accurate, reliable and timely manner, which may harm our reputation, the willingness of customers to use our products, and our financial results. In our payments processing service business, if a disputed transaction between a merchant and its customer is not resolved in favor of the merchant, we may be required to pay those amounts to the payment or credit card network and these payments may exceed the amount of the customer reserves established to make such payments. Business interruption or failure of our information technology and communication systems may impair the availability of our products and services, which may damage our reputation and harm our future financial results. Our reputation and ability to attract, retain and serve our customers is dependent upon the reliable performance of our products and our underlying technical infrastructure. As we continue to grow our online services, we become more dependent on the continuing operation and availability of our information technology and communications systems and those of our external service providers, including, for example, third-party Internet-based or cloud computing services. We do not have redundancy for all of our systems, and our disaster recovery planning may not account for all eventualities. We have designed a significant portion of our software and computer systems to utilize data processing and storage capabilities provided by public cloud providers. If any public cloud service that we use is unavailable to us for any reason, our customers may not be able to access certain of our cloud products or features, which could significantly impact our operations, business, and financial results. Failure of our systems or those of our third-party service providers may result in interruptions in our service and loss of data or processing capabilities, all of which may cause a loss in customers, refunds of product fees, material harm to our reputation and operating results. Our tax businesses must effectively handle extremely heavy customer demand during critical peak periods. We face significant risks in maintaining adequate service levels during these peak periods when we have historically derived a substantial portion of our overall revenue from the tax businesses. Any interruptions in our online tax preparation or electronic filing service at any time during the tax season, particularly during a peak period, could result in significantly decreased revenue, lost customers, unexpected refunds of customer charges, negative publicity and increased operating costs, any of which could significantly harm our business, financial condition and results of operations. We rely on internal systems and external systems maintained by manufacturers, distributors, and other service providers to take and fulfill customer orders, handle customer service requests and host certain online activities. Any interruption or failure of our internal or external systems may prevent us or our service providers from accepting and fulfilling customer orders or cause company and customer data to be unintentionally disclosed. Our continuing efforts to upgrade and expand our network security and other information systems as well as our high-availability capabilities are costly, and problems with the design or implementation of system enhancements may harm our business and our results of operations. Our business operations, information technology and communications systems are vulnerable to damage or interruption from natural disasters, effects of climate change, human error, malicious attacks, fire, power loss, telecommunications failures, computer viruses and malware, computer denial of service attacks, terrorist attacks, public health emergencies and other events beyond our control. For example, we operate under a hybrid workplace model where our workforce spends a portion of their time working in our offices and a portion of their time working away from our offices. This model has introduced risks of disruptions to our operations, which may impair our ability to perform critical functions or could make it considerably more difficult to develop, enhance and support our products and services. Intuit Q3 Fiscal 2026 Form 10-Q 55 Table of Contents In addition, since our corporate headquarters and other critical business operations are located near major seismic faults, our recovery in the event of a major earthquake or other catastrophic event may require us to expend significant time and resources and may adversely affect our financial condition and operating results. Further, the adverse effects of any such adverse event would be exacerbated if experienced at the same time as another unexpected and adverse event. In the event of a major natural or man-made disaster, our insurance coverage may not completely compensate us for our losses and our future financial results may be materially harmed. We regularly invest resources to update and improve our internal information technology systems and software platforms. Should our investments not succeed, or if delays or other issues with new or existing internal technology systems and software platforms disrupt our operations, our business could be harmed. We rely on our network infrastructure, data hosting, public cloud, and software-as-a-service providers, and internal technology systems for many of our development, marketing, operational, support, sales, accounting, and financial reporting activities. We are continually investing resources to update and improve these systems and environments in order to meet existing needs, as well as the growing and changing requirements of our business and customers. If we experience prolonged delays or unforeseen difficulties in updating and upgrading our systems and architecture, we may experience outages, defects or other performance problems, and may not be able to deliver certain offerings or develop new offerings and enhancements that we need to remain competitive. Such improvements and upgrades are often complex, costly and time consuming. In addition, such improvements can be challenging to integrate with our existing technology systems, or may uncover problems with our existing technology systems. Unsuccessful implementation of hardware or software updates and improvements could result in outages, disruption in our business operations, loss of revenue, or damage to our reputation. If we are unable to develop, manage and maintain critical third-party business relationships, our business may be adversely affected. Our growth is increasingly dependent on the strength of our business relationships and our ability to continue to develop, manage and maintain new and existing relationships with third-party partners. We rely on various third-party partners, including software and service providers, platforms, suppliers, credit reporting bureaus, vendors, manufacturers, distributors, accountants, contractors, financial institutions, core processors, licensing partners and development partners, among others, in many areas of our business in order to deliver our offerings and operate our business. Credit Karma generates revenue from its relationships with financial institutions and other partners, which are subject to particular risks that affect their willingness to offer their products on Credit Karma's platform, such as adverse economic conditions, evolving limitations on their capacity to offer products on the platform, the introduction of competing products on their platforms, and an increasing complexity in the regulatory environment. We also rely on third parties to support the operation of our business by maintaining our physical facilities, equipment, power systems and infrastructure. In certain instances, these third-party relationships are sole source or limited source relationships and can be difficult to replace or substitute depending on the level of integration of the third party’s products or services into, or with, our offerings and/or the general availability of such third party’s products and services. In addition, there may be few or no alternative third-party providers or vendors in the market. Further, there can be no assurance that we will be able to adequately retain third-party contractors engaged to help us operate our business. In particular, we have relationships with banks, credit unions and other financial institutions that support certain critical services we offer to our customers. If macroeconomic conditions or other factors cause any of these institutions to fail, consolidate, stop providing certain services, impose new or higher costs for certain services, or institute cost-cutting efforts, or give rise to speculation relating to such events, it may be more difficult to offer, if at all, those services to our customers, in which case our business and financial results may suffer. For example, if one of the counterparty financial institutions with whom we have significant deposits were to become insolvent, placed into receivership, or file for bankruptcy, our ability to recover our assets from such counterparty may be limited, which could negatively impact our results of operations and financial condition. Additionally, the business operations of our third-party partners and the third-party partners who support them have been and could continue to be disrupted, including as a result of major technical outages, uncertain macroeconomic conditions, such as trade wars, and global health crises, such as pandemics and endemics. If our third-party partners are unable to help us operate our business or prevent us from delivering critical services to our customers or accepting and fulfilling customer orders, our business and financial results may be negatively impacted. The failure of third parties to provide acceptable and high quality products, services and technologies or to update their products, services and technologies may result in a disruption to our business operations and our customers, which may reduce our revenues and profits, cause us to lose customers and damage our reputation. Alternative arrangements and services may not be available to us on commercially reasonable terms or at all, or we may experience business interruptions upon a transition to an alternative partner. As we cannot control the day-to-day practices of our suppliers and business partners, we cannot ensure their compliance with the law and our policies regarding workplace and employment practices, data use and security, environmental compliance, intellectual property licensing, and other applicable regulatory and compliance requirements. Any violation of laws or implementation of practices regarded as unethical could result in supply chain disruptions, canceled orders, terminations of or damage to key relationships, and damage to our reputation. We increasingly utilize the distribution platforms of third parties like Apple’s App Store and Google’s Play Store for the distribution of certain of our offerings, benefiting from the strong brand recognition and large user base of these distribution platforms to attract new customers. However, the platform owners have wide discretion to change the pricing structure, terms Intuit Q3 Fiscal 2026 Form 10-Q 56 Table of Contents of service and other policies with respect to us and other developers. Any adverse changes by these third parties could adversely affect our financial results. Competition for our key employees is intense and we may not be able to attract, retain and develop the highly skilled employees we need to support our strategic objectives. Much of our future success depends on the continued service and availability of skilled employees, including members of our executive team, and individuals in technical and other key positions. Experienced individuals with expertise in software as a service, financial technology, mobile technologies, data science, AI, and cybersecurity are in high demand. We have faced and will continue to face intense competition globally to attract and retain a diverse workforce with these and other skills that are critical to our success. This is especially the case in California and India where a significant number of our employees are located. In cases where existing employees cannot be effectively developed to meet evolving business needs, our ability to attract and retain top-tier talent becomes even more important. The compensation and incentives we have available to attract, retain and motivate employees may not meet the expectations of current and prospective employees as the competition for talent intensifies. For example, our equity awards may become less effective if our stock price decreases or increases at a slower rate than our talent competitors. In addition, our ability to issue significant additional equity to attract or retain employees may be limited by the risks of dilution to our existing stockholders and the related increase in our expenses. We may experience higher compensation costs to retain and recruit senior management and highly-skilled employees that may not be offset by improved productivity or revenue. Other factors may make it more challenging for us to continue to successfully attract, retain and develop key employees. Uncertainty in the development, deployment, and use of artificial intelligence in our platform and products and by our customers may result in harm to our business and reputation. We continue to build and invest in systems and tools that incorporate AI technologies, including GenAI for customers, experts, and our workforce. We also use third parties to support this work. As with many innovations, AI presents risks, uncertainties, and challenges that could adversely impact our business. The development, adoption, and use for GenAI technologies are still in their early stages, and ineffective or inadequate AI development or deployment practices by Intuit or third-party developers or vendors could result in unintended consequences. For example, AI algorithms that we use may be flawed or may be based on datasets that are biased or insufficient. In addition, any latency, disruption, or failure in our AI systems or infrastructure could result in delays or errors in our offerings. Developing, testing, and deploying resource-intensive AI systems may require additional investment and increase our costs. There also may be real or perceived social harm, unfairness, or other outcomes that undermine public confidence in the use and deployment of AI. In addition, third parties may deploy AI technologies in a manner that reduces customer demand for our products and services. Any of the foregoing may result in decreased demand for our products or harm to our business, results of operations or reputation. The legal and regulatory landscape surrounding AI technologies is rapidly evolving and uncertain including in the areas of intellectual property, cybersecurity, and privacy and data protection. In addition, there is uncertainty around the validity and enforceability of intellectual property rights related to our use, development, and deployment of AI. Compliance with new or changing laws, regulations, or industry standards relating to AI may impose significant operational costs and may limit our ability to develop, deploy or use AI technologies. Failure to appropriately respond to this evolving landscape may result in legal liability, regulatory action, or brand and reputational harm. If we experience significant product accuracy or quality problems or delays in product launches, it may harm our revenue, earnings and reputation. Our customers rely on the accuracy of our offerings. All of our tax products and many of our non-tax products have rigid development timetables that increase the risk of errors in our products and the risk of launch delays. Our tax preparation software product development cycle is particularly challenging due to the need to incorporate unpredictable, ambiguous, and potentially late tax law and tax form changes each year and because our customers expect high levels of accuracy and a timely launch of these products to prepare and file their taxes by the tax filing deadline. Due to the complexity of our products and the condensed development cycles under which we operate, our products have in the past, and may contain in the future unexpected errors that could interfere with the operation of the software or result in incorrect calculations. The complexity of the tax laws on which our products are based may also make it difficult for us to consistently deliver offerings that contain the features, functionality and level of accuracy that our customers expect. When we encounter problems, we may be required to modify our code, work with state tax administrators to communicate with affected customers, assist customers with amendments, distribute patches to customers who have already purchased the product and recall or repackage existing product inventory in our distribution channels. If we encounter development challenges or discover errors in our products either late in our development cycle or after release, it may cause us to delay our product launch date or suspend product availability until such issues can be fixed. Any major defects, launch delays or product suspensions may lead to loss of customers and revenue, negative publicity, customer and employee dissatisfaction, reduced retailer shelf space and promotions, and increased operating expenses, such as inventory replacement costs, legal fees or other payments, including those resulting from our accuracy guarantee in our tax preparation products. For example, an error in our tax products could cause a compliance error for taxpayers, including the over or underpayment of their federal or state tax liability. While our accuracy guarantee commits us to reimburse penalties and interest paid by customers due solely to calculation errors in our tax preparation products, such errors may result in additional burdens on third parties that we may need to address or that may cause us to suspend the availability of our products until such errors are addressed. This could also affect our reputation, the Intuit Q3 Fiscal 2026 Form 10-Q 57 Table of Contents willingness of customers to use our products, and our financial results. Further, as we develop our platform to connect people to experts, such as connecting TurboTax customers with tax experts through our TurboTax Expert Assist and TurboTax Expert Full Service offerings, or connecting QuickBooks customers with bookkeepers through our QuickBooks Live offering, we face the risk that these experts may provide advice that is erroneous, ineffective or otherwise unsuitable. Any such deficiency in the advice given by these experts may cause harm to our customers, a loss of customer confidence in our offerings or harm to our reputation or financial results. Moreover, as we continue to incorporate emerging technologies, like AI, into our offerings, they may not function as designed or have unintended consequences, any of which could subject us to new or enhanced competitive harm, legal liability, regulatory scrutiny or reputational harm. Our international operations are subject to increased risks which may harm our business, operating results, and financial condition. In addition to uncertainty about our ability to generate revenues from our foreign operations and expand into international markets, there are risks inherent in doing business internationally, including: •different or more restrictive privacy, data protection, data localization, and other laws that could require us to make changes to our products, services and operations, such as mandating that certain types of data collected in a particular country be stored and/or processed within that country; •difficulties in developing, staffing, and simultaneously managing a large number of varying foreign operations as a result of distance, language, and cultural differences; •stringent local labor laws and regulations; •credit risk and higher levels of payment fraud; •profit repatriation restrictions, and foreign currency exchange restrictions; •geopolitical events and dynamics, including natural disasters or severe weather events (including those caused or exacerbated by climate change), acts of war and terrorism (including any conflicts in the Middle East) and any related military, political or economic responses, and public health emergencies, including divergent governmental responses thereto affecting the jurisdictions in which we operate or maintain a workforce or facilities; •compliance with sanctions and import or export regulations, including those arising from the Russia-Ukraine war; •compliance with the U.S. Foreign Corrupt Practices Act, the U.K. Bribery Act, and laws and regulations of other jurisdictions prohibiting corrupt payments to government officials and other third parties; •antitrust and competition regulations; •potentially adverse tax developments; •economic uncertainties relating to European sovereign and other debt; •changes in trade policies and regulations, including the threat or imposition of protective trade measures, such as tariffs or other trade restrictions, as well as any retaliatory actions; •political or social unrest, economic instability, repression, or human rights issues; and •risks related to other government regulation or required compliance with local laws. Violations of the rapidly evolving and complex foreign and U.S. laws and regulations that apply to our international operations may result in fines, criminal actions or sanctions against us, our officers or our broader workforce, prohibitions on the conduct of our business and damage to our reputation. Our policies and procedures designed to promote compliance with these laws cannot ensure that our workforce, contractors and agents are in compliance with our policies. These risks inherent in our international operations and expansion increase our costs of doing business internationally and may result in harm to our business, operating results, and financial condition. Climate change may have an impact on our business. Our environmental programs and efforts to partner with organizations that are also focused on mitigating their own climate-related risks may not be sufficient to mitigate the business risks associated with climate change. Additionally, we recognize that there are inherent climate-related risks wherever business is conducted. Any of our primary workplace locations may be vulnerable to the adverse effects of climate change. For example, our offices globally have historically experienced, and are projected to continue to experience, climate-related events at an increasing frequency, including drought, water scarcity, heat waves, cold waves, extreme wind, wildfires and resultant air quality impacts and power shutoffs associated with wildfire prevention. Furthermore, it is more difficult to mitigate the impact of these events on our employees to the extent they work away from our offices. Changing market dynamics, global policy developments and the increasing frequency and impact of extreme weather events on critical infrastructure in the U.S. and elsewhere have the potential to disrupt our business, the business of our third-party suppliers and the business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations. We also expect to face increasing regulatory requirements and regulatory scrutiny related to climate matters, resulting in higher associated compliance costs. Intuit Q3 Fiscal 2026 Form 10-Q 58 Table of Contents LEGAL AND COMPLIANCE RISKS Increasing and changing regulation of our businesses may adversely affect our ability to operate or harm our operating results. We are subject to an increasing number of local, state, federal, and international laws, regulations, and rules and standards. These relate to, without limitation, labor, advertising and marketing, tax, financial services, AI, data privacy and security, electronic funds transfer, money transmission, lending, digital content, consumer protection, real estate, billing, e-commerce, promotions, quality of services, intellectual property ownership and infringement, import and export requirements, anti-bribery and anti-corruption, insurance, foreign exchange controls and cash repatriation restrictions, antitrust and competition, environmental, health and safety, and other regulated activities. The legal and regulatory environment in which we operate is complex, varies across jurisdictions and is subject to frequent change and evolving interpretations. New or amended laws, regulations, executive orders, directives, policies, and enforcement priorities may also be introduced. These dynamics affect our business. As we expand our offerings and evolve our business models, we have, and may in the future, become subject to additional regulatory requirements and heightened regulatory scrutiny. Our ability to adopt emerging technologies, including AI, and to innovate for our customers and operate our business may be harmed by the uncertainty and complexity created by the evolving legal and regulatory environment. For example, in February 2025, the European Union's Artificial Intelligence Act (AI Act) went into force regulating AI systems that affect individuals located in the EU. Additionally, countries and states are applying their data and consumer protection laws to AI and/or enacting or considering legal frameworks on AI, including Utah, Colorado, and California. Compliance with these laws, and similar emerging laws, may add significant costs to our business and may require us to change certain business practices to comply. In addition, some of our offerings, such as our lending and payments products, require licenses to operate. Our inability to obtain or maintain a license, or to comply with current or new license requirements, may materially harm our ability to operate in specific jurisdictions or subject us to regulatory fines or penalties. The tax preparation industry continues to receive heightened attention from federal and state governments. New legislation, regulation, public policy considerations, changes in the cybersecurity environment, litigation by the government or private entities, changes to or new interpretations of existing laws may result in greater oversight of the tax preparation industry, restrict the types of products and services that we can offer or the prices we can charge, or otherwise cause us to change the way we operate our tax businesses or offer our tax products and services. We are also required to comply with a variety of state revenue agency standards in order to successfully operate our tax preparation and electronic filing services. Changes in state-imposed requirements by one or more of the states, including the required use of specific technologies or technology standards, may significantly increase the costs of providing those services to our customers and may prevent us from delivering a quality product to our customers in a timely manner. Any perceived or actual failure to comply with applicable laws, regulations, and rules, including new interpretations of existing laws, regulations, and rules, could negatively impact our reputation, expose us to legal liability, fines, penalties, or require us to change our offerings or business operations. In addition, evolving laws, regulations, and rules may require us to modify our business practices or compliance programs in order to continue operating our businesses. Regulatory or legislative changes and other actions that materially affect our business may be announced with little or no advance notice, and we may be unable to respond quickly. As a result, we may face increased operating costs, reduced revenue opportunities, and may be unable to mitigate some or all of the adverse impacts those changes may cause. Any of the foregoing may adversely affect our ability to operate and may harm our results of operations. Complex and evolving privacy and data protection regulations or changing customer expectations could result in claims, changes to our business practices, penalties or increased cost of operations or otherwise harm our business. Regulations related to data privacy, cybersecurity, the collection, processing, storage, transfer and use of data, and the use of AI are evolving. Many jurisdictions in which we operate globally have enacted, or are in the process of enacting, data privacy legislation or regulations aimed at creating and enhancing individual privacy rights. For example, the General Data Protection Regulation (GDPR) regulates the collection, use, and retention of personal information by our offerings in the EU. In addition, in the absence of a unified federal privacy standard, a growing number of U.S. states have enacted or introduced data privacy laws and regulations. Several countries have established specific legal requirements for cross-border data transfers and governmental authorities and privacy advocates around the world continue to propose new regulatory actions concerning data protection. Moreover, several jurisdictions are considering regulatory frameworks for AI that implicate data protection laws. In our efforts to meet the various data privacy regulations that apply to us, we have made and continue to make certain changes to our offerings, business practices, and use of certain third party tools and vendors. Additionally, customer sensitivity to privacy continues to increase and our privacy statements and practices may create additional customer expectations about the collection, use, and sharing of personal information. In addition, the evolution of global privacy treaties and frameworks has created compliance uncertainty and increased complexity. For example, the judicial invalidation of the EU-U.S. Privacy Shield and Safe Harbor frameworks that we relied on to transfer data created additional compliance challenges for the transfer of EU personal data to the U.S. While a new EU-U.S. Data Privacy Framework currently provides a basis for us to transfer personal data from the European Union to the U.S., the future of this framework is uncertain because it faces legal challenges in the European courts. Intuit Q3 Fiscal 2026 Form 10-Q 59 Table of Contents Each of these privacy, security and data protection requirements could impose significant limitations on us, require changes to our business practices, require notification to customers, workers, and others of a security incident, restrict our use or storage of personal information, limit our use of third-party tools and vendors, or cause changes in customer purchasing behavior that may make our business more costly, less efficient or impossible to conduct, and may require us to modify our current or future products or services, which may make customers less likely to purchase our products and may harm our future financial results. Additionally, any actual or alleged noncompliance with these laws and regulations, or failure to meet customer expectations could result in negative publicity or harm to our reputation and subject us to investigations, claims or other remedies, including demands that we modify or cease existing business practices, and expose us to significant fines, penalties and other damages. We have incurred, and may continue to incur, significant expenses to comply with existing privacy and security standards and protocols imposed by law, regulation, industry standards or contractual obligations. We are frequently a party to litigation and regulatory inquiries which could result in an unfavorable outcome and have an adverse effect on our business, financial condition, results of operation and cash flows. We are subject to various legal proceedings (including class action lawsuits), claims and regulatory inquiries that have arisen out of the ordinary conduct of our business and are not yet resolved and additional proceedings, claims and inquiries may arise in the future. The number and significance of these proceedings, claims and inquiries may increase as our businesses evolve. Any proceedings, claims or inquiries initiated by or against us, whether successful or not, may be time consuming; result in costly litigation, damage awards, consent decrees, injunctive relief or increased costs of business; require us to change our business practices or products; require significant amounts of management time; result in diversion of significant operations resources; or otherwise harm our business and future financial results. For further information about specific litigation, see Part II, Item 1, “Legal Proceedings.” Third parties claiming that we infringe their proprietary rights may cause us to incur significant legal expenses and prevent us from selling our products. We may become increasingly subject to infringement claims, including patent, copyright, trade secret, and trademark infringement claims. Litigation may be necessary to determine the validity and scope of the intellectual property rights of others. We have received a number of allegations of intellectual property infringement claims in the past and expect to receive more claims in the future based on allegations that our offerings infringe upon the intellectual property held by third parties. Some of these claims are the subject of pending litigation against us and against some of our customers. These claims may involve patent holding companies or other adverse intellectual property owners who have no relevant product revenues of their own, and against whom our own intellectual property may provide little or no deterrence. The ultimate outcome of any allegation is uncertain and, regardless of outcome, any such claim, with or without merit, may be time consuming to defend, result in costly litigation, divert management’s time and attention from our business, require us to stop selling, delay shipping or redesign our products, or require us to pay monetary damages for royalty or licensing fees, or to satisfy indemnification obligations that we have with some of our customers. Our failure to obtain necessary licenses or other rights, or litigation arising out of intellectual property claims made against us may harm our business. We are subject to risks associated with information disseminated through our services. The laws relating to the liability of online services companies for information such as online content disseminated through their services are subject to frequent challenges, and there has been an increasing demand for repealing or limiting the protections afforded by these laws through either judicial decision or legislation. In spite of settled law in the U.S., claims are made against online services companies by parties who disagree with the content. Where our online content is accessed on the internet outside of the U.S., challenges may be brought under foreign laws which do not provide the same protections for online services companies as in the U.S. These challenges in either U.S. or foreign jurisdictions may require altering or limiting some of our services or may require additional contractual terms to avoid liabilities for our customers’ misconduct and may further give rise to legal claims alleging defamation, libel, invasion of privacy, negligence, copyright or trademark infringement, or other theories based on the nature and content of the materials disseminated through the services. Certain of our services include content generated by users of our online services. Claims of intellectual property infringement, defamation or other injury may be made against us for that content, even if that content is not generated by us. Any claims, meritorious or not, may lead to business disruption and costs incurred as a result of this potential liability, which may harm our business. FINANCIAL RISKS The results of operations of our tax business may fluctuate from period to period due to the seasonality of the business and other factors beyond our control. Our tax offerings have significant seasonal patterns. Revenue from income tax preparation products and services has historically been heavily concentrated from November through April, as the tax filing deadline for the IRS and many states is traditionally in April. This seasonality has caused significant fluctuations in our quarterly financial results. In addition, unanticipated changes to federal and state tax filing deadlines may further exacerbate the impact of the seasonality. Our financial results from our tax offerings may also fluctuate from quarter to quarter and year to year due to a variety of other factors, some of which may affect the timing of revenue recognition. These include the timing of the availability of federal and state tax forms from taxing agencies and the ability of those agencies to receive or process electronic tax return submissions or Intuit Q3 Fiscal 2026 Form 10-Q 60 Table of Contents issue refunds; changes to our offerings that result in the inclusion or exclusion of ongoing services; changes in product pricing strategies or product sales mix; changes in customer behavior; and the timing of our discontinuation of support for older product offerings. Other factors, including unanticipated changes to the tax code or the administration of government programs and payments by tax authorities, may cause variations from year to year in the number of tax filers. Any of the foregoing could negatively impact the number of tax returns we prepare and file and the operating results of our tax business. Other factors that may affect our quarterly or annual financial results include the timing of acquisitions, divestitures, and goodwill and acquired intangible asset impairment charges. Any fluctuations in our operating results may adversely affect our stock price. If actual customer refunds for our offerings exceed the amount we have reserved, our future financial results may be harmed. Like many software companies, we refund customers for product returns and subscription and service cancellations. We establish reserves against revenue in our financial statements based on estimated customer refunds. We closely monitor this refund activity in an effort to maintain adequate reserves. In the past, customer refunds have not differed significantly from these reserves. However, if we experience actual customer refunds or an increase in risks of collecting customer payments that significantly exceed the amount we have reserved, it may result in lower net revenue. Unanticipated changes in our income tax rates or other indirect tax may affect our future financial results. Our future effective income tax rates may be favorably or unfavorably affected by unanticipated changes in the valuation of our deferred tax assets and liabilities, by changes in our stock price, or by changes in tax laws or their interpretation. Foreign governments may enact tax laws, including in response to guidelines issued by international organizations such as the Organisation for Economic Co-operation and Development, that could result in further changes to global taxation and materially affect our financial position and results of operations. In addition, we are subject to the continuous examination of our income tax returns by the Internal Revenue Service and other tax authorities. We regularly assess the likelihood of adverse outcomes resulting from these examinations to determine the adequacy of our provision for income taxes. These continuous examinations may result in unforeseen tax-related liabilities, which may harm our future financial results. An increasing number of states and foreign jurisdictions have adopted laws or administrative practices that impose new taxes on all or a portion of gross revenue or other similar amounts or impose additional obligations to collect transaction taxes such as sales, consumption, value added, or similar taxes. We may not have sufficient lead time to build systems and processes to collect these taxes properly, or at all. Failure to comply with such laws or administrative practices, or a successful assertion by such states or foreign jurisdictions requiring us to collect taxes where we do not, could result in material tax liabilities, including for past sales, as well as penalties and interest. Adverse global macroeconomic conditions could harm our business and financial condition. Adverse macroeconomic conditions, and perceptions or expectations about current or future conditions, such as volatility or distress in the financial markets, recession or inflationary pressures, slowing growth, rising interest rates, rising unemployment, rising consumer debt levels, reduced consumer confidence or economic activity, government fiscal and tax policies, U.S. and international trade relationships, government shutdowns and austerity programs could negatively affect our business and financial condition. These macroeconomic conditions or global events, such as political instability, sanctions, and war, have caused, and could, in the future, cause disruptions and volatility in global financial markets, increased rates of default and bankruptcy, decreases in consumer and small business spending and other unforeseen consequences. It is difficult to predict the impact of such events on our partners, customers, members, or economic markets more broadly, which have been and will continue to be highly dependent upon the actions of governments and businesses in response to macroeconomic events, and the effectiveness of those actions. Additionally, adverse developments that affect financial institutions, such as bank failures, or concerns or speculation about similar events or risks, could lead to liquidity challenges and further instability in the financial markets, which may in turn cause third parties, including customers, to become unable to meet their obligations under various types of financial arrangements. Moreover, because the majority of our revenue is derived from sales within the U.S., economic conditions in the U.S. have an even greater impact on us than companies with a more diverse international presence. Macroeconomic conditions, and perceptions or expectations about current or future conditions, could cause potential new customers not to purchase or to delay purchasing our offerings, and could cause our existing customers to discontinue purchasing or delay upgrades of our existing offerings. Some financial institutions and other partners have in the past decreased or suspended their activity on Credit Karma’s platform and could do so in the future. In addition, increased interest rates may make offers from Credit Karma’s partners less attractive to Credit Karma's members. Members may decrease their engagement on the platform or their creditworthiness could be negatively impacted, reducing members' ability to qualify for credit cards and loans. Decreased consumer spending levels could also reduce payment processing volumes, causing reductions in our payments revenue. High unemployment and changes in the tax code and the government programs that are administered by tax authorities have caused, and could in the future cause, a significant decrease in the number of tax returns filed, which may have a significant effect on the number of tax returns we prepare and file. In addition, weakness in our end-user markets could negatively affect the cash flow of our distributors who could, in turn, delay paying their obligations to us, which could increase our credit risk exposure and cause delays in our recognition of revenue or future sales to these customers. Adverse economic conditions may also increase the costs of operating our business, including vendor, supplier and workforce expenses. Additionally, any inability to access the capital markets when needed due to volatility or illiquidity in the markets or increased regulatory liquidity and capital requirements may strain our liquidity positions. Such conditions may also Intuit Q3 Fiscal 2026 Form 10-Q 61 Table of Contents expose us to fluctuations in foreign currency exchange rates or interest rates that could materially and adversely affect our financial results. Any of the foregoing could harm our business and negatively impact our future financial results. We provide access to capital to small and mid-market businesses and consumers, which exposes us to risk, and may cause us material financial or reputational harm. We provide qualified small and mid-market businesses and consumers with access to capital from third-party lenders and then we purchase some or all of those loans from the lender. This activity exposes us to the risk of the borrowers’ inability to repay such loans. We have entered into credit arrangements with financial institutions as a source of funding to purchase some or all of the loans. Any termination or interruption in the financial institutions’ ability to lend to us could interrupt our ability to provide capital to these borrowers. Further, the credit decisioning, pricing, loss forecasting, scoring and other models used to evaluate loan applications may contain errors or may not adequately assess creditworthiness of the borrowers, or may be otherwise ineffective, resulting in incorrect approvals or denials of loans. It is also possible that loan applicants could provide false or incorrect information. Moreover, adverse macroeconomic conditions, such as inflation and rising interest rates, have impacted and may continue to impact both small and mid-market businesses and consumers, and may increase the likelihood that the borrowers are unable to repay their loans. These risks are exacerbated as we expand into new products and customer segments. If any of the foregoing events were to occur, our reputation, relationships with borrowers, collections of loans receivable and financial results could be harmed. Amortization of acquired intangible assets and impairment charges may cause significant fluctuation in our net income. Our acquisitions have resulted in significant expenses, including amortization and impairment of acquired technology and other acquired intangible assets, and impairment of goodwill. We may incur impairment charges related to the goodwill already recorded and to goodwill arising out of future acquisitions. We test the impairment of goodwill annually in our fourth fiscal quarter or more frequently if indicators of impairment arise. The timing of the formal annual test may result in charges to our statement of operations in our fourth fiscal quarter that may not have been reasonably foreseen in prior periods. New acquisitions, and any impairment of the value of acquired intangible assets, may have a significant negative impact on our future financial results. We have incurred indebtedness and may incur other debt in the future, which may adversely affect our financial condition and future financial results. We have indebtedness outstanding and may incur additional short-term and long-term debt in the future. This debt may adversely affect our financial condition and future financial results by, among other things: •increasing our vulnerability to downturns in our business, to competitive pressures and to adverse economic and industry conditions; •requiring the dedication of a portion of our expected cash from operations to service our indebtedness, thereby reducing the amount of expected cash flow available for other purposes, including capital expenditures, share repurchases and acquisitions; and •limiting our flexibility in planning for, or reacting to, changes in our businesses and our industries. If we are unable to generate sufficient cash flow from operations in the future to service our debt, we may be required, among other things, to seek additional financing in the debt or equity markets, refinance or restructure all or a portion of our indebtedness, sell selected assets or reduce or delay planned capital, operating or investment expenditures. Such measures may not be sufficient to enable us to service our debt. Additionally, the agreements governing our indebtedness impose restrictions on us and require us to comply with certain covenants. For example, our credit facilities restrict the ability of our subsidiaries to incur indebtedness and require us to maintain compliance with specified financial ratios. Our ability to comply with these ratios may be affected by events beyond our control. In addition, our credit facilities and the indenture governing our senior unsecured notes limit our ability to create liens on our and subsidiaries’ assets and engage in sale and leaseback transactions. If we breach any of these covenants and do not obtain a waiver from the lenders or the noteholders, as applicable, then, subject to applicable cure periods, any or all of our outstanding indebtedness may be declared immediately due and payable. Under the terms of our 2020 Notes, we may be required to repurchase the notes for cash prior to their maturity in connection with the occurrence of certain changes of control that are accompanied by certain downgrades in the credit ratings of the notes. The repayment obligations under the notes may have the effect of discouraging, delaying or preventing a takeover of our company. If we were required to pay the notes prior to their scheduled maturity, it could have a negative impact on our cash position and liquidity and impair our ability to invest financial resources in other strategic initiatives. In addition, changes by any rating agency to our credit rating may negatively impact the value and liquidity of both our debt and equity securities. If our credit ratings are downgraded or other negative action is taken, the interest rate payable by us under our unsecured revolving credit facility may increase. In addition, adverse economic conditions or any downgrades in our credit ratings may affect our ability to obtain additional financing in the future and may negatively impact the terms of any such financing. There can be no assurance that any refinancing or additional financing would be available on terms that are favorable or acceptable to us, if at all. For further information about our indebtedness, see Note 6 to the condensed consolidated financial statements in Part I, Item 1 of this Quarterly Report. Intuit Q3 Fiscal 2026 Form 10-Q 62 Table of Contents We cannot guarantee that our share repurchase program will be fully consummated or that it will enhance long-term stockholder value. We have a stock repurchase program under which we are authorized to repurchase our common stock. The repurchase program does not have an expiration date and we are not obligated to repurchase a specified number or dollar value of shares. Our repurchase program may be suspended or terminated at any time. Even if our stock repurchase program is fully implemented, it may not enhance long-term stockholder value. Also, the amount, timing, and execution of our stock repurchase programs may fluctuate based on our priorities for the use of cash for other purposes and because of changes in cash flows, tax laws, and the market price of our common stock. Our stock price may be volatile and your investment could lose value. Our stock price is subject to changes in recommendations or earnings estimates by financial analysts, changes in investors’ or analysts’ valuation measures for our stock, our credit ratings and market trends unrelated to our performance, including perceptions about the impact of evolving technologies on our business. Furthermore, speculation in the press or investment community about our strategic position, financial condition, results of operations, business, security of our products, or legal proceedings can cause changes in our stock price. These factors, as well as general economic and political conditions, including the effects of a general slowdown in the global economy, inflationary pressures, pandemics and endemics, significant armed conflicts, acts of war and terrorism, and the timing of announcements in the public market regarding new products, product enhancements or technological advances by our competitors or us, and any announcements by us of acquisitions, major transactions, or management changes may cause volatility in our stock price. Moreover, inflationary pressures, pandemics and endemics, and significant armed conflicts, acts of war and terrorism have caused, and in the future may cause, increased volatility in the global financial markets and, in turn, our stock price. Further, any changes in the amounts or frequency of share repurchases or dividends may also adversely affect our stock price. A significant drop in our stock price could expose us to the risk of securities class action lawsuits, which may result in substantial costs and divert management’s attention and resources, which may adversely affect our business. Intuit Q3 Fiscal 2026 Form 10-Q 63 Table of Contents