19. Commitments and contingenciesContractual Commitments
We have $68.4 million of non-cancelable contractual commitments as of December 31, 2025, which are primarily related to
software licenses, maintenance and bandwidth for our servers.
The following is a schedule, by years, of non-cancelable contractual commitments as of December 31, 2025 :
Contingencies
From time to time we may become involved in legal proceedings or be subject to claims arising in the ordinary course of
our business. We are not presently a party to any legal proceedings that, if determined adversely to us, would individually
or taken together have a material adverse effect on our business, results of operations, financial condition or cash flows.
Regardless of the outcome, litigation can have an adverse impact on us because of defense and settlement costs,
diversion of management resources and other factors.
The amount of the provisions represents management’s latest estimate of the expected impact.
Legal and Regulatory Matters
Following a complaint from Privacy International against a number of advertising technology companies with certain data
protection authorities, including in France, France's Commission Nationale de l'Informatique et des Libertés (the "CNIL")
opened a formal investigation in January 2020 against Criteo. In June 2023, the CNIL issued its decision, which retained
alleged European Union's General Data Protection Regulation ("GDPR") violations but reduced the financial sanction
against Criteo from the original amount of €60 million ($70.5 million) to €40 million ($47.0 million). Criteo issued the
required sanction payment during the third quarter of 2023. The decision relates to past matters and does not include any
obligation for Criteo to change its current practices. Criteo has appealed this decision before the French Council of State
(Conseil d’Etat).
As previously disclosed, the Company is party to a claim (Doe vs. GoodRx Holdings, Inc. et al. in the U.S. District Court for
the Northern District of California) alleging violations of various state and federal laws. In the third quarter of 2025, the
Company agreed to settle the matter for $7.0 million, subject to court approval. GoodRx agreed to indemnify the Company
for $5.5 million, subject to court approval of the settlement with plaintiffs. In January 2026, the court denied approval of the
proposed settlement. The Company continues to engage in discussions with the plaintiffs and GoodRx to address the
Judge’s requests and re-file the settlement agreement. Based on management's assessment of the underlying facts and
circumstances, including the status of settlement discussions and the indemnification arrangement with GoodRx, the
Company recognized an estimated probable loss of $7.0 million within “Contingencies-current portion” as of December 31,
2025 and an indemnification receivable of $5.5 million within “Prepaid expenses and other current assets”. The resulting
estimated net probable loss of $1.5 million was recognized within “General and administrative expenses” in the Company’s
consolidated statement of operations for the year ended December 31, 2025. The results of legal proceedings are
inherently uncertain and it is reasonably possible that the ultimate loss may differ from our estimate.
On July 9, 2025, a putative class action was filed against the Company, CVS and others in the U.S. District Court for the
Central District of California, alleging violations of various laws regarding sensitive health and personal information. On
October 27, 2025, the action was dismissed with respect to the Company. On November 7, 2025, a second amended
putative class action complaint was filed against the Company, CVS and others in the U.S. District Court for the Central
District of California, again alleging violations of various laws regarding sensitive health and personal information. The
plaintiffs seek damages and injunctive relief. We dispute the allegations of wrongdoing and intend to defend ourselves
vigorously in these matters. On January 30, 2026, the plaintiff filed a stipulation to dismiss the case, and the parties are
currently engaged in mediation.
On October 17, 2025, AlmondNet, Inc. and Intent IQ, LLC filed a patent-infringement lawsuit in the U.S. District Court for
the District of Delaware. The complaint was served to the Company on October 21, 2025. The plaintiffs seek damages and
injunctive relief. We dispute the allegations of wrongdoing and intend to defend ourselves vigorously in these matters.
Non income tax risks
During the year ended December 31, 2025, management reassessed the provision related to certain non-income tax
matters recognized under ASC 450, Contingencies, reducing the balance from $31.9 million to $22.7 million. These risks
were initially identified and recognized as part of the Iponweb Acquisition in 2022. In accordance with the purchase
agreement relating to the acquisition, the Company is indemnified against specific tax risks, and as such, an
indemnification asset has been recorded. The indemnification asset is recorded as part of "Other noncurrent assets" on the
consolidated statement of financial position.