What Shift4 Payments, Inc. told the SEC could break it.

As Shift4 expands in the EU/UK, it is subject to GDPR, with penalties for certain breaches up to the greater of EUR 20M / GBP 17.5M or 4% of global annual turnover, plus regulatory investigations and civil claims.

“There are material sanctions under GDPR for failing to comply, and penalties for certain breaches are up to the greater of EUR 20 million/ GBP 17.5 million or 4% of our global annual turnover.”

Shift4 relies on its (single, unnamed) sponsor bank for card-network sponsorship and treasury services in the U.S. and Canada; loss of the sponsor without a replacement would prevent it from processing for certain merchants.

“We rely on our sponsor bank to provide sponsorship to card and other payment networks and treasury services in the U.S. and Canada. If our sponsor bank stops providing sponsorship and treasury services, we would need to find one or more other financial institutions to provide those services.”

Many key components used to manufacture Shift4's products, such as its POS systems, come from a limited number of suppliers, exposing it to shortage, price increases, tariffs, delay or discontinuation.

“Certain key components are procured from a limited number of suppliers. Thus, we are at risk of shortage, price increases, tariffs, changes, delay, or discontinuation of key components, which could disrupt and materially and adversely affect our business.”

Shift4 conducts certain operations in Israel (~3% of employees); IDF reserve-duty call-ups amid regional conflict may affect those operations.

“We conduct certain operations in Israel, where approximately 3% of our employees reside. A number of our employees are subject to military service in the IDF and have been, or may be, called to serve.”