DASH · CIK 1792789
What DoorDash, Inc. told the SEC could break it.
DoorDash's disclosures cluster on the legal and operational dependencies of a gig-economy platform. Much of its exposure stems from how it classifies Dashers — claims over unpaid wages, wage-and-hour rules, expense reimbursement, payroll taxes and statutory penalties including California's PAGA — alongside international compliance risk, where its operations near Russia and across Europe raise OFAC/EU sanctions and anti-money-laundering exposure that could reach penalties of up to 10% of fiscal-year revenue. On the operational side it leans on single or near-single third-party providers: Stripe (with PayPal) to process payments to merchants, Dashers and consumers, and a single background-check provider in the U.S. and Canada — any of which, if lost, would disrupt payments or Dasher onboarding.
4 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Supplier concentration
- payment-processing dependence on Stripe (primary) and PayPal — either may terminatemedium
DoorDash primarily relies on a single third-party payment processor, Stripe, to process payments to merchants and Dashers, and on Stripe and PayPal for consumer payments; under its commercial agreements each party may terminate the relationship, and loss of these processors would disrupt payments.
“We primarily rely on a third-party payment processor, Stripe, to process payments made to merchants and Dashers and third-party payment processors to process payments made by consumers, primarily Stripe and PayPal. Under our commercial agreements with Stripe and PayPal, each of these parties may terminate our re[lationship]”
SEC filing →As of 2026 - single third-party background-check provider in U.S. & Canada (limited elsewhere)medium
In certain jurisdictions including Canada and the U.S., DoorDash relies on a single third-party background-check provider (and a very limited number elsewhere); inability to find acceptable alternates could prevent timely onboarding of Dashers, making the platform less attractive.
“In certain jurisdictions, including Canada and the United States, we currently rely on a single third-party background check provider. In other jurisdictions, we rely on a very limited number of background check providers.”
Litigation
- Dasher worker-classification exposure — wage/hour, PAGA, employee-benefits, payroll-tax claimsmedium
DoorDash faces claims relating to Dasher classification — failure to withhold/remit taxes, unpaid wages and wage-and-hour requirements (minimum wage, overtime, breaks, wage statements), expense reimbursement, statutory/punitive damages and penalties (including California's PAGA), injunctions, and claims for employee benefits/social security/workers' comp.
“failure to withhold and remit taxes, unpaid wages and wage and hour laws and requirements (such as those pertaining to failure to pay minimum wage and overtime, or to provide required breaks and wage statements), expense reimbursement, statutory and punitive damages, penalties, including related to California's Labor Code Private Attorneys General Act (“PAGA”)”
SEC filing →As of 2026
Regulatory & policy
- international sanctions/AML — OFAC/EU sanctions (ops near Russia), EU AML penalties up to 10% of revenuemedium
DoorDash's international operations (including jurisdictions near Russia, e.g. via Wolt) raise compliance risk under anti-corruption, export-control and OFAC/EU trade-and-economic-sanctions regimes; insufficient anti-money-laundering/KYC measures in Europe could expose it to penalties of up to 10% of fiscal-year revenue.
“in connection with our operations in Europe, we could be liable for penalties of up to 10% of our revenue in a fiscal year in the event that our anti-money laundering compliance measures are found to be insufficient.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its suppliers
Stripe, Inc.
“We primarily rely on a third-party payment processor, Stripe, to process payments made to merchants and Dashers and third-party payment processors to process payments made by consumers, primarily Stripe and PayPal.”
Cited →“We primarily rely on a third-party payment processor, Stripe, to process payments made to merchants and Dashers and third-party payment processors to process payments made by consumers, primarily Stripe and PayPal.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch