NABL · CIK 0001834488
What N-able, Inc. told the SEC could break it.
N-able's disclosures are dominated by how international the company is. More than half of its 2025 revenue (50.4%) came from outside the U.S. and about 79% of its employees are abroad across more than 11 countries, exposing it to currency swings, varied regulation and geopolitical risk. That footprint includes operations in Minsk, Belarus, where it faces intermittent internet outages and U.S./EU sanctions and export-control restrictions amid Russia-Ukraine fallout, and more broadly it is subject to U.S. export controls, economic-sanctions laws and global data-privacy regimes like GDPR. Its revenue is also increasingly concentrated in larger MSP partners — customers with over $50,000 of annual recurring revenue grew to about 61% of total ARR — so churn among them would weigh disproportionately.
4 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Geographic concentration
- 50.4% of revenue and ~79% of employees outside the U.S.high
N-able is heavily international — 50.4% of 2025 revenue came from outside the U.S. (UK alone ~10.2%) and ~79% of employees are located abroad across 11+ countries — exposing it to FX, varied regulation, geopolitical and labor risks beyond its U.S. base.
“Revenue from customers outside of the United States represented 50.4% of our total revenue for the fiscal year ended December 31, 2025, and as of December 31, 2025, approximately 79% of our employees were located outside of the United States.”
Customer concentration
- larger ($50K+ ARR) customers are 61% of total ARRmedium
N-able's revenue is increasingly concentrated in larger partners — customers with over $50,000 annualized recurring revenue grew to ~61% of total ARR at year-end 2025 (from ~57%) — so churn or downsizing among those larger MSP partners would disproportionately impact revenue.
“these customers grew from approximately 57% of our total ARR as of December 31, 2024 to approximately 61% of our total ARR as of December 31, 2025.”
SEC filing →As of 2026
Other disclosures
- operations in Belarus exposed to sanctions, internet outages and Russia-Ukraine falloutmedium
N-able maintains operations in Minsk, Belarus, where intermittent communications/internet outages occur and the U.S./EU have imposed sanctions and export-control restrictions; these measures and Russia-Ukraine fallout pose security risks to its people, facilities, systems and operations.
“intermittent communications and mobile internet outages have 26 Table of Contents occasionally occurred in Belarus, and the United States, the European Union and various other nations have imposed economic and trade sanctions and export control restrictions against multiple Belarusian officials and entities. The ongoing impact of these measures, as well as any further retaliatory actions, is uncertain and may pose security risks to our people, our facilities, our technology systems and our operations”
SEC filing →As of 2026
Regulatory & policy
- U.S. export controls/economic sanctions and global data-privacy regulationmedium
Certain N-able solutions are subject to U.S. export controls (EAR) and economic-sanctions laws, and the company faces evolving data-privacy/breach regimes (GDPR, UK, FTC, state laws) — non-compliance could impair international sales and bring penalties.
“We are subject to governmental export controls and economic sanctions laws that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws.”
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch