GDDY · CIK 1609711
What GoDaddy Inc. told the SEC could break it.
GoDaddy's risks span its main business lines. As a registrar, it must pay registry fees set by VeriSign (.com/.net) and ICANN over which it has no control — and VeriSign has repeatedly raised .com prices — pushing up costs for it and its customers. As it builds out GoDaddy Payments, that business may become subject to payments regulation, including the Bank Secrecy Act, anti-money-laundering and sanctions rules and state money-transmitter licensing, bringing record-keeping, reporting, bonding and customer-fund investment requirements. And its customer support is concentrated offshore, with about 3,400 individuals at third-party partners primarily in India and the Philippines.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Regulatory & policy
- payments regulation (BSA/AML/money transmitter)medium
GoDaddy Payments may become subject to BSA/AML, sanctions and state money-transmitter licensing regimes, bringing record-keeping/reporting/bonding requirements, customer-fund investment limits and regulatory inspections.
“Various U.S. federal, state and international laws, rules and regulations govern the payments industry, including the Bank Secrecy Act of 1970, anti-money laundering and sanctions regulations, and state money transmitter licensing laws. Our payments services may become subject to regulation by authorities, which would subject us to, among other things, (i) record-keeping, reporting and bonding requirements, (ii) limitations on the investment of customer funds and (iii) inspection by state and federal regulatory agencies.”
SEC filing →As of 2026
Supplier concentration
- domain registry fees (VeriSign/ICANN)medium
As a registrar, GoDaddy must pay registry fees set by VeriSign (.com/.net) and ICANN and has no control over those registries' fee structures; VeriSign has repeatedly raised .com prices, raising GoDaddy's/customers' costs.
“We have no control over ICANN, VeriSign or other domain name registries and cannot predict their future fee structures.”
SEC filing →As of 2026
Geographic concentration
- offshore customer-care providers (India, Philippines)low
GoDaddy relies on third-party providers for contracted care/support — ~3,400 individuals primarily in India and the Philippines — concentrating customer-support operations offshore.
“we partner with various third-party providers and vendors to provide contracted care and support services to our customers; approximately 3,400 individuals are employed with or engaged by our external partners. These third-party providers are primarily located in international markets, most significantly in India and the Philippines.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its suppliers
“Each registry typically imposes a fee in association with the registration of a domain name. For example, VeriSign, the registry for .com and .net, has a current annual list prices of $10.26 and $11.66 for .com and .net registrations, respectively, and ICANN charges $0.20 for most domain names registered in the gTLDs within its purview.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch