SNOW · CIK 1640147
What Snowflake Inc. told the SEC could break it.
Snowflake's platform was built from the ground up on a cloud-native architecture running across multiple public clouds, so the business fundamentally depends on third-party hyperscaler infrastructure for delivery, scale and cross-cloud continuity. A second thread is cross-border data regulation: a DOJ rule restricting transfers of sensitive data to countries of concern such as China, Russia and Iran constrains its vendor, employment and investor arrangements, and with 25% of FY2026 revenue from outside the U.S. it must adapt and localize the platform to data-sovereignty regimes in places like China and Saudi Arabia. Nearer term, its 2027 and 2029 convertible senior notes became convertible because the stock traded at or above 130% of the conversion price, and elected conversions could require cash settlement that pressures liquidity.
4 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Liquidity & debt
- convertible senior notes conversion triggered — 2027/2029 Notes convertible (stock ≥130% of conversion price)medium
Holders of Snowflake's 2027 and 2029 convertible senior notes can convert during the fiscal quarter ending April 30, 2026 because the stock traded at ≥130% of the conversion price for ≥20 of the last 30 trading days through January 31, 2026; elected conversions could require Snowflake to settle in cash, pressuring liquidity.
“holders of each series of the Notes can convert their Notes at any time during the fiscal quarter ending April 30, 2026 as the last reported sale price of our common stock was greater than or equal to 130% of the conversion price for the Notes for at least 20 trading days during the 30 consecutive trading days ending on the last trading day of the fiscal quarter ended January 31, 2026.”
SEC filing →As of 2026
Regulatory & policy
- DOJ 'countries of concern' data-transfer rule (China/Russia/Iran) — restricts vendor/employment/investor activitiesmedium
A DOJ rule restricting transfers of sensitive personal/government-related data to countries of concern (e.g., China, Russia, Iran) or covered persons impacts Snowflake's vendor engagements, employment of certain individuals, and investor agreements; violations could lead to significant civil and criminal fines and penalties.
“places prohibitions or restrictions on certain data transactions involving the transfer of certain personal information to countries of concern (e.g., China, Russia, Iran) or individuals/entities located in or subject to the control of those jurisdictions. This rule impacts certain business activities such as vendor engagements, employment of certain individuals, and investor agreements.”
Sole-source dependency
- dependence on third-party public-cloud infrastructure (cloud-native architecture across multiple public clouds)medium
Snowflake's platform was built from the ground up on a cloud-native architecture that leverages the public cloud and runs across multiple public-cloud providers and regions; the business fundamentally depends on those third-party hyperscaler infrastructure providers for delivery, scalability and cross-cloud continuity.
“Our platform was built from the ground up to take advantage of the cloud, and is built on an innovative multi-cluster, shared data architecture.”
SEC filing →As of 2026
Geographic concentration
- international operations — 25% of revenue non-U.S.; data-sovereignty/localization (China, Saudi Arabia adaptation)low
Customer accounts outside the U.S. generated 25% of Snowflake's FY2026 revenue and it plans further geographic expansion; international operations face differing/more onerous data-privacy, security and data-localization regulation and the need to adapt and localize the platform for China, Saudi Arabia and other countries' data-sovereignty requirements.
“Customer accounts outside the United States generated 25% of our revenue for the fiscal year ended January 31, 2026.”
SEC filing →As of 2026
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch